f0d606d5919522d57ee32313014e2f7f_JaffaCakes118 | Triage

Sharing

General

Target

f0d606d5919522d57ee32313014e2f7f_JaffaCakes118
Size

242KB
MD5

f0d606d5919522d57ee32313014e2f7f
SHA1

c1ce5ab54a174503ba424263e9ba02f541a76f47
SHA256

0d89a5f3b8c508373f8347ac6225e19ecc75c81f6aab6d45c1dd8458686ccc31
SHA512

5e44b61ad8f0cb2e70bb968499ad5fc7367eadf0aaba0274f02f9e933d69162e7065228e26a5f57459757fa83a8c905909bf97a96c9311310581ed23e01a7cf8
SSDEEP

3072:BFZIcjE+5nE2uboCqFoGO0GA1E0rXHIofvp2vjwze+xsTiN+sD1uhwbTnHGx2D4H:BFZIA25kOFAdrNfx2vj0d1GwXmxsYSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0d606d5919522d57ee32313014e2f7f_JaffaCakes118

Files

f0d606d5919522d57ee32313014e2f7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

746f680188dbd58b68dadfa6bfa97862

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW

kernel32

LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
LZCopy
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer

oleaut32

DispInvoke
OleLoadPicture
VarUdateFromDate
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen

shlwapi

PathFindExtensionA

Sections

.text
Size: 117KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ