3daca36550fd85306770e889a9d4d116_JaffaCakes118 | Triage

Sharing

General

Target

3daca36550fd85306770e889a9d4d116_JaffaCakes118
Size

260KB
MD5

3daca36550fd85306770e889a9d4d116
SHA1

0e1a9693d795a086d16a748bf56fae378a1dbc71
SHA256

21a88c8052866336ad4d2e76e96cf1b9f9bbff300f0fefa26ccb9858b38743e8
SHA512

f3586132ba74aeb5b4060e12fb4840c59ac869fb5dab28be50032242ac9689597c9437d76cdb32f268394b898fc9e355b54e236a7597880021e2b390336aa6de
SSDEEP

6144:hG5tC/XKOWN5osp7Pbk0YscXyLzGoB/Ml+1hO4qUsKpC:kYvK95osZfcecYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3daca36550fd85306770e889a9d4d116_JaffaCakes118

Files

3daca36550fd85306770e889a9d4d116_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b007a1c2b7fdf0d12e073d3f7952c21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
RtlUnwind
CreateSemaphoreW
OpenSemaphoreA
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayAllocData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 174KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ