e9e07dde85b72849f48566bfc3615016_JaffaCakes118 | Triage

Sharing

General

Target

e9e07dde85b72849f48566bfc3615016_JaffaCakes118
Size

185KB
MD5

e9e07dde85b72849f48566bfc3615016
SHA1

ba6da56562fbd4ba06eda85d42e7fc1698aa6585
SHA256

e29487787bece23e02a6b0371b294e01e5fd9d5da9840177ebdc47b792374ea9
SHA512

f572fcb6013a717619b1465a0f1e58b62e280162177ac50c1bc45d58f05747260d85c35baa41b77bed6afb764f5972887dea771003e0fa9105102a467a4e6c6d
SSDEEP

3072:SiV1IPC5X6zj1/Kd7eGyrzRFlcjPo5WxtabWJGeAz1IINhwIUcNkQTSOTg58Vrc2:QP0s9G7c1+oQOuGeVINhwZFQfUhE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e07dde85b72849f48566bfc3615016_JaffaCakes118

Files

e9e07dde85b72849f48566bfc3615016_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c51bfa57c4baae1a93967e38b975cbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetTapeStatus
GetCPInfo
ClearCommError
LCMapStringW
EnumResourceNamesA
ExitProcess
GetModuleHandleA
LCMapStringA
ExitProcess
GetProcAddress

user32

GetWindowInfo
MessageBoxW

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ