0c4b45c4c2804c15d958189a79b48284_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4b45c4c2804c15d958189a79b48284_JaffaCakes118
Size

187KB
MD5

0c4b45c4c2804c15d958189a79b48284
SHA1

a73b0460cf8b0fd2bbde19a5a7a5625f31dc342c
SHA256

d1ef1f5b08defd560053ce8395582a8c94f8d3a81fb90dffae10c89ee061bd1e
SHA512

638b0f7ae1a2f1c336868fb1dcc02385d047644311452cb9b6db99796e5247c3c0eaf81e384020a7ca46c6f4c8688dca3d7408900eab5b6b696df217e58d6d6a
SSDEEP

3072:I1VnyLT12UiX9zuC5nwngkQ4hbTA0Ij86DhfCSo/WGHEfElm7mYb6oPJgkLsiS05:I1V412UiXpX5wnZIjNo/pIlbjh1Xx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4b45c4c2804c15d958189a79b48284_JaffaCakes118

Files

0c4b45c4c2804c15d958189a79b48284_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e97509496f9576461532c0c2c1414196

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

PostThreadMessageW
RealGetWindowClass
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
PeekMessageW

kernel32

CreateFiberEx
FileTimeToSystemTime
TerminateJobObject
GetTempPathW
EnumResourceNamesW
FlushFileBuffers
LocalAlloc
SetEvent
RaiseException

shlwapi

wnsprintfW

ole32

CoAddRefServerProcess
CoUninitialize
CoInitialize
CoTaskMemFree
CoRegisterMessageFilter
StringFromGUID2
CoResumeClassObjects
CoRevokeClassObject
GetRunningObjectTable
CoRegisterClassObject
CoCreateInstance
CLSIDFromString
CreateStreamOnHGlobal
CreateClassMoniker
CoDisconnectObject
CoReleaseServerProcess
CoTaskMemAlloc

iphlpapi

NotifyRouteChange

rpcrt4

UuidCreate

advapi32

RegOpenKeyExA
EncryptFileW
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
DecryptFileW

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ