e8ec7762d790d895885c627e7bff4b49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8ec7762d790d895885c627e7bff4b49_JaffaCakes118
Size

189KB
MD5

e8ec7762d790d895885c627e7bff4b49
SHA1

d524c5725ef45dd697dc0f3505bb64110589daf7
SHA256

93d843832bf08dc811c9d60d23e500f26086412c889424cd4f35111d5ddc30b2
SHA512

5cac14af02afd32cf9ead4d6fc221ce3b1ff9c55e24ca5eaced4f951fe1432c7e4014305398132fdb430c2041c29727691f6e2825ffc781a22a051ad8e8c65b0
SSDEEP

3072:jHmjLBwniwq95cP4kfO1bL9peOP7WOj8WC21e+nLJs0PU7OmGz3z50:+LBwnZ1fO99pXDWOb1h6087OmG/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8ec7762d790d895885c627e7bff4b49_JaffaCakes118

Files

e8ec7762d790d895885c627e7bff4b49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1f4a5717ceb0d877e0bb9d930b6b360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleW
GetCPInfoExA
_lread
LocalFree
FindFirstFileA
_llseek
SizeofResource
RaiseException
GetCommandLineW
_lwrite
GetCurrentDirectoryW
EnumResourceNamesA
SetLastError
LockResource
HeapAlloc
FindFirstFileW
MultiByteToWideChar
FindFirstFileW
FindNextFileA
GlobalFree
HeapFree
LoadResource
FormatMessageW
Sleep
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ