3b4228137b82dd5772473c108ca027d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4228137b82dd5772473c108ca027d0_JaffaCakes118
Size

251KB
MD5

3b4228137b82dd5772473c108ca027d0
SHA1

cb50deeffafcc198fb36ef1d1e12f15c0051219d
SHA256

c9568dbb3abd87331cbc02f7ec2afdf9e485f649fc2986d448bdf5ac12bcade8
SHA512

bc6bf11b0451423abbc07f4b8d77204f95073101597234768b782786dce7ad4669ee99a8bd6bd8a4997de2bb84ad4d0ff9e7d8048f8a31dc5f790475c38baf2c
SSDEEP

6144:SGL7bcK2YKw7Tf0PimvGTSZMZuN6JIgwQI5Y+1ea2REOh:rbN2Vwvf0P3caMR6Q9+czDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4228137b82dd5772473c108ca027d0_JaffaCakes118

Files

3b4228137b82dd5772473c108ca027d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eeb6c0c9f779bdab442456c74846cfd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
RtlUnwind
CreateSemaphoreW
OpenFileMappingA
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayCopyData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 121KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ