08d6fb885c1cc8ab18cef67c670d9827_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d6fb885c1cc8ab18cef67c670d9827_JaffaCakes118
Size

177KB
MD5

08d6fb885c1cc8ab18cef67c670d9827
SHA1

65602e63d5c0bf5859e729bf8c19f49568aaf87e
SHA256

47c42328daf2052c3ece1ccaf827a0f5c4b59e15e608361ff0e4df136c7c8be0
SHA512

436e2a398a8254bbaa1809e323e884d6059aa8a154685c8915c5454bfa5d909681ee478cf7a243dc94f6aae0d578808ee0b16a85b9bcafa421727b943fc22b0e
SSDEEP

3072:8Cu+9LgvWhRmMpuYwGu1ZuwzFgj/N3suOAJOjsiKIzRp0kvD+aQcy9K:Du+9J2J1qLN3zrJOIiNi3aBy9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d6fb885c1cc8ab18cef67c670d9827_JaffaCakes118

Files

08d6fb885c1cc8ab18cef67c670d9827_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edb765eaf8b359b28d0cde6a45f57248

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetCalendarInfoW
GetSystemTime
HeapDestroy
LeaveCriticalSection
CloseHandle
HeapAlloc
LoadLibraryW
GetProcessHeap
GetStdHandle
GetVersionExA
SystemTimeToFileTime
EnumResourceNamesA
LockResource
HeapFree
FindFirstFileW
CreateFileW
GetModuleHandleA
lstrcpynW
LoadResource
FindResourceA
FindResourceExA
WriteFile
LoadLibraryExW
SizeofResource
TerminateProcess

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ