f08d38a1f989bfb17f770f36cb525077_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f08d38a1f989bfb17f770f36cb525077_JaffaCakes118
Size

400KB
MD5

f08d38a1f989bfb17f770f36cb525077
SHA1

7397dae37c961d05eb878e876af850732a4acc16
SHA256

296474a9795961f6684529bb39b52bb6fc96a7101ce4af175a20776e7495044f
SHA512

f3083821e43e84ef02a8c33b7c4f43c7c0388d5da182a6029f06e1f21b1df9f39e053dedf744930505ff7f54256972577f04137accb529f94a345bd2a84787e4
SSDEEP

6144:hymIF7+tk5jQzUTXMG5eyYP9pOrWswVu5gWHs4tKHi8jDHzJn:hyTF+tklQzUDMGIjP9grnsDWMsADHzt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f08d38a1f989bfb17f770f36cb525077_JaffaCakes118

Files

f08d38a1f989bfb17f770f36cb525077_JaffaCakes118
.exe windows:1 windows x86 arch:x86

209ef54c8c6d582ecdb5dcbbf8422794

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetWindowsDirectoryA
GlobalFindAtomA
IsBadStringPtrA
MoveFileA

user32

TabbedTextOutA
UnregisterClassA

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE