385016aad8c6b736a7b8b2f33f2b6e7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

385016aad8c6b736a7b8b2f33f2b6e7e_JaffaCakes118
Size

259KB
MD5

385016aad8c6b736a7b8b2f33f2b6e7e
SHA1

f0325393812b8caa0a62968cc6ca9e95914a76c8
SHA256

d9b26f2d109b125a29c29b7f7cc70c5910cc7a271d7ed2c22bcb1fe2aef4b9ac
SHA512

db2fb784a89e503353d685082d3bd18021680b8acef3ccd4d0b8dbd1a3000e0b566ed5152d007d225a010ceac4849180f3e60ed2b14b9a8e65590777cffb3bff
SSDEEP

6144:qm1Bh2CAbPs/pL0mte39n+cKUgrcP31Ul/VrbS3ZyphLoOB9:Drh2K/pL0Fp+/la31EbS3ophLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
385016aad8c6b736a7b8b2f33f2b6e7e_JaffaCakes118

Files

385016aad8c6b736a7b8b2f33f2b6e7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

936f6e9f7377a90e19f9477f07315f44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
RtlUnwind
CreateSemaphoreW
InitializeSListHead
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

GetRecordInfoFromTypeInfo
OleLoadPicture
VariantChangeTypeEx
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 168KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ