18d5ab43a5941000f28cc0eb1dd724a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18d5ab43a5941000f28cc0eb1dd724a7_JaffaCakes118
Size

235KB
MD5

18d5ab43a5941000f28cc0eb1dd724a7
SHA1

a204bd22efa6a04ba77b47b2baf007a2e2c3e085
SHA256

9985bc3277f9d6ac16cde688e7ac65f1350f94604e12154dae23c18a0907cdec
SHA512

83e6e339eecc4c3c5a9f44780ad97753c28f983b1175e3f0e0e00ee7d957598a7faff4dfa3fb19115537e5d425f009988e5e4af079f7881a94c560a91a004649
SSDEEP

3072:iBC++ywahrekkgPBf1UG585lz8EkMg8mgkZoP5CB3iPejaj0WTYd+NCHVSZVFDZe:iCbv2rekNzUG25g0TB8b+0EYwlvDZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18d5ab43a5941000f28cc0eb1dd724a7_JaffaCakes118

Files

18d5ab43a5941000f28cc0eb1dd724a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6f94d9719359700a4e710d9cb5160aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleFontInfo
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

Sections

.text
Size: 138KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE