3baba67fe867c4b33e7385490f4cc910_JaffaCakes118 | Triage

Sharing

General

Target

3baba67fe867c4b33e7385490f4cc910_JaffaCakes118
Size

254KB
MD5

3baba67fe867c4b33e7385490f4cc910
SHA1

f657fa08c5bf298fafb3edd02551fd21550be5f0
SHA256

4c169899047b00d0469e323b551b82b16d7a11962fe859006ae8419041e3f9de
SHA512

03102fe658a6beb8d53618b3be185f67b94a3f78284945ec2ce4302dd4ca704f66c26354f2e7302f0d475748ee7eadd13ad610915e0092b7928e11fb31b70341
SSDEEP

6144:e/jyywaV4meKBMgiehW00g4KjsZPyO/2PeKwoCyO1P2+Mauh:8jMajedgiWz0gFO/VBTfHuh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3baba67fe867c4b33e7385490f4cc910_JaffaCakes118

Files

3baba67fe867c4b33e7385490f4cc910_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0767559f4da070469ff0689f61ccf335

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
CompareFileTime
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
OACreateTypeLib2
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA

ole32

CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

shlwapi

PathFindExtensionA

Sections

.text
Size: 142KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ