07bc5d291788a8b09b42080a8a46102d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bc5d291788a8b09b42080a8a46102d_JaffaCakes118
Size

168KB
MD5

07bc5d291788a8b09b42080a8a46102d
SHA1

2b34d2b363e6f22a0e99518d0cec95159f23d28f
SHA256

cf999e8d71bb1fbce559b00851b7cf3d1f37ca31bb66e30ce9b6be0005507c32
SHA512

6622340fb708e82e795465bb8968307f0bcdcc664df3def7f056f464170a4c7202b36a0dbdbd0de62d2ec952da8e0fc07628b7792f28f1223035c58a9df31241
SSDEEP

3072:fnU74SKkum0slZ8oo8YlFOg/sW58XNteRSAhJ/Ka:fnLVkv08ZjWj/slCthJ/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bc5d291788a8b09b42080a8a46102d_JaffaCakes118

Files

07bc5d291788a8b09b42080a8a46102d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25d9ad4d1b4397a57a8dd7df92c39af8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

shlwapi

PathFileExistsW
PathFileExistsA
StrStrIW

kernel32

GetCalendarInfoA
LoadResource
FindResourceA
CloseHandle
SizeofResource
LoadLibraryW
GetProcessHeap
HeapAlloc
SystemTimeToFileTime
HeapDestroy
EnumResourceNamesA
LeaveCriticalSection
LockResource
WriteFile
GetModuleHandleA
FindFirstFileW
GetVersionExA
LoadLibraryExW
lstrcpynW
GetStdHandle
GetSystemTime
CreateFileW
HeapFree
FindResourceExA
TerminateProcess

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ