08b7ebe4f0aa1861ca07b96830284860_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08b7ebe4f0aa1861ca07b96830284860_JaffaCakes118
Size

86KB
MD5

08b7ebe4f0aa1861ca07b96830284860
SHA1

1489110fbb1740d1ee966973d3aca74baafc960d
SHA256

a63d93446e7bc480972f4b64bc6fb023318dbd13b0781286d913722d0ec23b30
SHA512

ddab13d31f860d9ca3faa8e131f6d1fe07cfed09dc896e1c6df491d2ed375e6ef9040c17ee9881955be28bac4afd91ee73ac09c4675ddbbdba876ecb1421f954
SSDEEP

1536:HYsrNVT4Oe/dlnyK1B1aGFJuDjGN84QN/UJjfWlBDcuQnQep1H49KWWktNjCB9A:4UN0PnyKFQqJjfWlBbezH49XtNGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b7ebe4f0aa1861ca07b96830284860_JaffaCakes118

Files

08b7ebe4f0aa1861ca07b96830284860_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a73b0f0e6635765524b0bb365aed64f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EmptyClipboard
DrawStateA
CreateIcon
CreateAcceleratorTableA
CharLowerA

kernel32

RaiseException
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
TlsGetValue
GetStartupInfoA
GetVersion
LeaveCriticalSection
LoadResource
MapViewOfFile
SetEndOfFile
Sleep
TlsAlloc
TlsFree

Sections

.text
Size: 19KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ