JaffaCakes118_e8b87ef23b4d7f6cfea6602da3664a52 | Triage

Sharing

General

Target

JaffaCakes118_e8b87ef23b4d7f6cfea6602da3664a52
Size

175KB
MD5

e8b87ef23b4d7f6cfea6602da3664a52
SHA1

e8862de0dd2e6003ed6cd1db5f1ab6f8b0785833
SHA256

4fbb6e9750081f138fb41ccabedffbbb19d822ce838bd24b7827f8498686b26e
SHA512

31a2b01c2e32be14d9427c2e182abb9318deed9bec0135634d8216a73757a8c3e7c2eaa531055f322f38eb09de58a2ecdd242ff9acad16cbce8e6b3701153cef
SSDEEP

3072:zg4qqg0toHTuaWqSvDZxIY/x0MlVT1CaQoHfytRrj6MFdtrx5FuzO2BV:zg4qqgAVFqOf50M7hCa5fKRrfrxCq2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e8b87ef23b4d7f6cfea6602da3664a52

Files

JaffaCakes118_e8b87ef23b4d7f6cfea6602da3664a52
.exe windows:4 windows x86 arch:x86

f99bbf3aa7d843190ddd69fb6dd46846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringA
GetNextVDMCommand
FindResourceW
FileTimeToSystemTime
GetStringTypeW
SetThreadPriority
GetShortPathNameW
LocalFileTimeToFileTime
SetErrorMode
SetEnvironmentVariableW
FileTimeToLocalFileTime
LoadResource
FreeLibrary
EnumResourceNamesW
RegisterWaitForSingleObject
SetCurrentDirectoryW
SystemTimeToFileTime
GetLocalTime
FindClose
FindFirstFileW
FindNextFileW
SearchPathW

user32

ValidateRgn
ExcludeUpdateRgn
SetCapture
RealGetWindowClassA
InvalidateRgn
ValidateRect
GetCapture
ReleaseCapture
GetUpdateRgn

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ