8b9cd3ae8356878b21f727e2b535bb37_JaffaCakes118 | Triage

Sharing

General

Target

8b9cd3ae8356878b21f727e2b535bb37_JaffaCakes118
Size

79KB
MD5

8b9cd3ae8356878b21f727e2b535bb37
SHA1

77aa80201f21d159b043bf84ac3d6fc72a31356d
SHA256

d3f635fc1f6c9e4faf71378dcd8019f9560fdf3d240a3b0673117d8b093a23ad
SHA512

29d76bf896b95b57bf90d49afd405d8a9ffc44e2e3d39e91415882b580a9070f02aafaaf2c4dcf8e2ce2d1d6fad87266076ab2ec7b55e6178d20776b17590333
SSDEEP

1536:PLWA+/2KY1zWZMfz6CPv9QOmNBp0wv1GqodTx3NHS6IGx:gUkZMfzPv9Q5p0wFKTxUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b9cd3ae8356878b21f727e2b535bb37_JaffaCakes118

Files

8b9cd3ae8356878b21f727e2b535bb37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd3ba0623a37796f40f34708e8f2360f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharUpperW
IsCharLowerA
GetForegroundWindow

gdi32

GetFontData

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ