04c214891b4675a1b1377551b5d06879_JaffaCakes118 | Triage

Sharing

General

Target

04c214891b4675a1b1377551b5d06879_JaffaCakes118
Size

166KB
MD5

04c214891b4675a1b1377551b5d06879
SHA1

d3e95be62405db2e3dac19286701d658b7d1ae0d
SHA256

35647e4a73a5ba15a671783b6499023d51094fd088e09c59dd42b2e7f9225b83
SHA512

80ffba2b6500247eafb39ee600b3a58340f9e72f4e0a09811cdeb1064166df9b7d5039030fe0544f07f952e943f7cd7834c722cce430cf299a3a5fb8517e093a
SSDEEP

3072:lHmjLNF9utk0WVJTuZ3E6xPVDdyNysC+L/pSU/yJGbZbkSWeZgFOsl:4LNF4tk0WV1AE6NBd380Ynv9iF9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04c214891b4675a1b1377551b5d06879_JaffaCakes118

Files

04c214891b4675a1b1377551b5d06879_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1f4a5717ceb0d877e0bb9d930b6b360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleW
GetCPInfoExA
_lread
LocalFree
FindFirstFileA
_llseek
SizeofResource
RaiseException
GetCommandLineW
_lwrite
GetCurrentDirectoryW
EnumResourceNamesA
SetLastError
LockResource
HeapAlloc
FindFirstFileW
MultiByteToWideChar
FindFirstFileW
FindNextFileA
GlobalFree
HeapFree
LoadResource
FormatMessageW
Sleep
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ