3d156beaf2260b8683c15c3abf45b673_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d156beaf2260b8683c15c3abf45b673_JaffaCakes118
Size

171KB
MD5

3d156beaf2260b8683c15c3abf45b673
SHA1

41812647afd936d82528a3ce7ee8c623bcc0c291
SHA256

d374b3dfafd614c812b7947bf8bc643ca505966869b2e0aa0b537938910addee
SHA512

856971ac5234e2b4a6dbf34aa8c2231898492affd75fbfacbf068c1b9b83862da2575f63bc640405bdbdcb0442c2d21f2d897f02971916f6206e12d530dfc8c5
SSDEEP

3072:Rn3c0oW9d9AGdm7Bs6O8JrwdlpbYGMKg/cFC:Rns0o6AKmSBdMcF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d156beaf2260b8683c15c3abf45b673_JaffaCakes118

Files

3d156beaf2260b8683c15c3abf45b673_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf8ca339c83a1c86b6fe7df6f7140c70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

LoadLibraryW
GetLocaleInfoA
GetCalendarInfoW
HeapReAlloc
GetSystemTime
HeapSize
SystemTimeToFileTime
CloseHandle
CreateFileW
GetStdHandle
EnumResourceNamesA
HeapDestroy
FindFirstFileW
HeapFree
LoadLibraryExW
WriteFile
GetProcessHeap
GetThreadLocale
HeapAlloc
lstrcpynW

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ