16d622621b386be86f31ad2d4f0fbc09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d622621b386be86f31ad2d4f0fbc09_JaffaCakes118
Size

164KB
MD5

16d622621b386be86f31ad2d4f0fbc09
SHA1

ac8b59a3759deba191d720e1078c2db94cf72237
SHA256

e27196f3c4d50a4281ea72ce85f38df53f0ab68bc0d20365542eb972468d097d
SHA512

0335da2dfacfcef5a5b59a2b8174b2bc121126cd42c479432164c62a352e6c7b9f7f1ce6a8637963eeaaaed49fb8dbd75b2f6c481ca0a1a6ad385ce45d79b3f9
SSDEEP

3072:tpnn3refzf/VaGa64ZwdqnTdygdp4UQP0kPChu8dzdV8IqxgYkQztinLV:XnqrJazFdAP8dz/NqmYjinL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d622621b386be86f31ad2d4f0fbc09_JaffaCakes118

Files

16d622621b386be86f31ad2d4f0fbc09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b73525c336e84bf9caae610cc6996f89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

CloseHandle
LoadResource
GetCalendarInfoA
LoadLibraryW
SizeofResource
CreateFileW
GetSystemTime
lstrcpynW
LeaveCriticalSection
FindResourceExA
HeapAlloc
GetProcessHeap
WriteFile
EnumResourceNamesA
LockResource
FindFirstFileW
SystemTimeToFileTime
GetStdHandle
HeapDestroy
GetVersionExA
HeapFree
GetModuleHandleA
FindResourceA
LoadLibraryExW
TerminateProcess

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ