071ecdfa4b8bec0e87c899e08e7645d0_JaffaCakes118 | Triage

Sharing

General

Target

071ecdfa4b8bec0e87c899e08e7645d0_JaffaCakes118
Size

239KB
MD5

071ecdfa4b8bec0e87c899e08e7645d0
SHA1

3cc3b64b70b61910ecf13c874c48ad9887a39f0d
SHA256

32d327592b5f0cc916233518005d60aaa16504c4f9380cf4c0175f83e402181b
SHA512

334cf076bf098e415450a357ca681f20bf708d08ae0e4bb01f33e6caf26918dbb3e22b86c301b7dd8619fd2074e67fd15e4b31da486c80fd715b4e7ebe551dcd
SSDEEP

6144:zNuRbHCeIfFFdAS6yJGaoYVScGMqNqWLSo06xPq:zCzCeINFmnyfXSDMqbzfxPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
071ecdfa4b8bec0e87c899e08e7645d0_JaffaCakes118

Files

071ecdfa4b8bec0e87c899e08e7645d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afb42e8b00e7403d30dd26c8dd74aad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleCursorMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

shell32

ShellExecuteExA
SHAppBarMessage
Shell_NotifyIconA
FindExecutableA
ShellExecuteA
SHGetFolderPathA
CommandLineToArgvW

msvfw32

ICInfo
ICOpen
ICSendMessage
ICClose
ICGetInfo

Sections

.text
Size: 149KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE