383bad3dd8e4c20619970998a62ec9fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

383bad3dd8e4c20619970998a62ec9fb_JaffaCakes118
Size

182KB
MD5

383bad3dd8e4c20619970998a62ec9fb
SHA1

2a0b703602cd8c2351acf4882c12c46a840cff47
SHA256

24c0ba343ff4ba212b2c245160a27db16dbe22387af6d70de84a477b76186395
SHA512

6e105b62ef283bb85833f43398a963dfad59ba45affe30c89e13a6daaf4e90bc38f1ec7a5860b772c57a2b6a258453b96643179875aee2ee45f4d8f38eaf44d1
SSDEEP

3072:FHmjLQmva9k1ii9ZGNtdJipgQH+OxNQh5Q++o/g2uc9NZNRBsUmCCfhspAvmLs:YLQ/k4ic/iG5OfQvX+ojuibjs5CC2C7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
383bad3dd8e4c20619970998a62ec9fb_JaffaCakes118

Files

383bad3dd8e4c20619970998a62ec9fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1f4a5717ceb0d877e0bb9d930b6b360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleW
GetCPInfoExA
_lread
LocalFree
FindFirstFileA
_llseek
SizeofResource
RaiseException
GetCommandLineW
_lwrite
GetCurrentDirectoryW
EnumResourceNamesA
SetLastError
LockResource
HeapAlloc
FindFirstFileW
MultiByteToWideChar
FindFirstFileW
FindNextFileA
GlobalFree
HeapFree
LoadResource
FormatMessageW
Sleep
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ