07215f6ee47ce6baa728d941cf538aec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07215f6ee47ce6baa728d941cf538aec_JaffaCakes118
Size

358KB
MD5

07215f6ee47ce6baa728d941cf538aec
SHA1

9e3e2aeb2ae857c5f95f2a2b555acd45019900ca
SHA256

696ffd3d5c2467b5e74726b78e97d686340886c6536130cd31ce0cc42eba6dff
SHA512

a7c0b90a7921301117280733660e1deef35cb7be6c2c0511c1e88e158b1cdf2f8a895ac373c021dce760e79c718e1f7a930dadf433c03093e97e382b10bc19f0
SSDEEP

6144:z7oGaoT3NezEyjL+dnLeAOx7uHHXB/PaKIvs6lbgcEfO/5KK9cNHdu/5uru8gY:/xB72XmlBo7CXBqKP6KfO8KqNHxrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07215f6ee47ce6baa728d941cf538aec_JaffaCakes118

Files

07215f6ee47ce6baa728d941cf538aec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

023660249a5d22367981753f35fe51d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
FindFirstChangeNotificationW
FindNextChangeNotification
EnumCalendarInfoExA
FindCloseChangeNotification
WaitForSingleObject
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceW
GetCurrentDirectoryW
GetTickCount
Sleep
MulDiv
FindFirstFileW
FindClose
LoadLibraryA
FreeLibrary
MultiByteToWideChar
GetModuleHandleW
GetVersionExA

oleaut32

VARIANT_UserFree
GetAltMonthNames
VarUI1FromUI8
LHashValOfNameSys
OACreateTypeLib2
OleCreatePropertyFrame
RevokeActiveObject

msvfw32

ICInfo

Sections

.text
Size: 242KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE