2de8d369b3b3da88c2f7aac7d613deb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2de8d369b3b3da88c2f7aac7d613deb1_JaffaCakes118
Size

168KB
MD5

2de8d369b3b3da88c2f7aac7d613deb1
SHA1

7f435eeae36baef915f988ea60ba93fea61a1743
SHA256

158960368f9f078fdcbfae5016be40a5da134a1884c4b85a2baab547694f2d09
SHA512

bcb717b22089ac31772b703de5cfdeb12843ff99555a8e6c8c64b30a4fb236edb97e6a76e1bc42f9635135b0ff165c7be51bba3331f16d258446754b91e62dc8
SSDEEP

3072:jBXHRAlGb/oZ3NWGd8UGOZFSNJCTepfSmCJAUv+BYO3tctt77EtaS:jd+WgZ3NGUdZF8sqpq34tctmaS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2de8d369b3b3da88c2f7aac7d613deb1_JaffaCakes118

Files

2de8d369b3b3da88c2f7aac7d613deb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95f43139397f51fdd7892c705f9d456d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

kernel32

GetVersionExA
LoadLibraryW
LoadResource
GetCalendarInfoA
HeapFree
LoadLibraryExW
HeapDestroy
GetProcessHeap
LeaveCriticalSection
CreateFileW
FindResourceA
lstrcpynW
EnumResourceNamesA
CloseHandle
GetSystemTime
FindFirstFileW
FindResourceExA
LockResource
WriteFile
SizeofResource
GetModuleHandleA
SystemTimeToFileTime
HeapAlloc
GetStdHandle
TerminateProcess

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ