cf8adb5d27cebef99f689dd921de387d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf8adb5d27cebef99f689dd921de387d_JaffaCakes118
Size

168KB
MD5

cf8adb5d27cebef99f689dd921de387d
SHA1

9c8de37ffeb675951af501572be5a3a23d523fc7
SHA256

823ea5277529464bc6d6e0415dfdccd2dcdacaa3763cfd21c9ec889292211fde
SHA512

731830a437133a6e8f8d6aad1c8669679ced5118621a6e3912ed4905c8a8b25763a5f230f2be1ad9369e716feb804d23229dbabc8fbb31eb25a456f4380d9faa
SSDEEP

3072:9zzoioxDP6rquv0ipYdhw57sm+Xq+dmc4+xi+E8G+1AjifgJyl53eR5W:xEryOuMiYw5MXfmb+o+E8+yfc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf8adb5d27cebef99f689dd921de387d_JaffaCakes118

Files

cf8adb5d27cebef99f689dd921de387d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

lJM^T.5s
Size: - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Im^2NM=7
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

*24@U`&^
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HV1Ao,TE
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

w=N f]f(
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE