2dd4eee8edbb72597bac799ec9aba9fd_JaffaCakes118 | Triage

Sharing

General

Target

2dd4eee8edbb72597bac799ec9aba9fd_JaffaCakes118
Size

179KB
MD5

2dd4eee8edbb72597bac799ec9aba9fd
SHA1

bc6f6d5bfea4223bb95743459c8ce697f4a0831c
SHA256

d7a44b60b9679e435701308183ff6ddd018a807c42ea53c3bec7e8108f0275c2
SHA512

a8e9b126739cde9d8e60a48a6aca7f8962074e78aac94c46d30b91039429d0ed291dc819dc243c70705f31be3984bdbbc2e740a4c0a3e15442cc9eb634551e7d
SSDEEP

3072:FeokrC6FtnsdFS63Lqi993+PzNeW9X8Ye0V6DvZhOKxT8louriesMs9YQdEHVte:6Wi9sLSsuPzgW9X8IIzZ4Kx8cesMIkVt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd4eee8edbb72597bac799ec9aba9fd_JaffaCakes118

Files

2dd4eee8edbb72597bac799ec9aba9fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5472addc1ae8ea24a97dc99ad54662eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
HeapAlloc
ExitProcess
GetSystemInfo
HeapAlloc
VirtualQuery
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
RtlUnwind
EnumResourceTypesA
HeapValidate
GetProcessHeap
FindFirstFileExA
VirtualProtect
RaiseException
HeapFree

gdi32

GetStockObject

oleacc

GetOleaccVersionInfo
CreateStdAccessibleObject

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ