066a4c30a4e489ff2a1947f4937fd886_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

066a4c30a4e489ff2a1947f4937fd886_JaffaCakes118
Size

264KB
MD5

066a4c30a4e489ff2a1947f4937fd886
SHA1

572b5d6552d2742e307a451963cb5be78fff3c9c
SHA256

fc95db99997cc8986732614adcb7e957ac764ff42061ac2f1e427fe939e810bd
SHA512

dc653b1d5a6f8a6950cd15759c3d9577f317fd151d5abb7df113e491b2eff25d7fa652cc7e3086977ac1d7fd78879a4c56047f75611dc1b868c9a21c0719adfe
SSDEEP

6144:PSkPYr6arJlR9m68riU/dwlPoFREHrlf5q:Prw/ttmbriUgxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066a4c30a4e489ff2a1947f4937fd886_JaffaCakes118

Files

066a4c30a4e489ff2a1947f4937fd886_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83aa14ce871ac7612164141d3b06cdf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
AttachConsole
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
CreateTypeLib
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 190KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ