42433774add8aa0056e8bcc1f7976f27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42433774add8aa0056e8bcc1f7976f27_JaffaCakes118
Size

165KB
MD5

42433774add8aa0056e8bcc1f7976f27
SHA1

2724adbff9bd3c1a7ec32be4ddf5ab56cb86e6d6
SHA256

48e1d9f9740664c4f3d2d6f6f1e0b141fa762d556bb7fd6ff87844b3f48da507
SHA512

5c5cd7f45ffb276906840436cd4dd0d8cc7d02ce374379676f520330655472b6f93bcd89a5e71bfdc4cb11438ce33bfaba5847b898efb2bb81e6058a628678ba
SSDEEP

3072:mNbJU++XdMSx53zoxtjJtksnNz3CSFhwDnU04Hmk4spjz:mNbJUDXN3zoxt1tBnNz1hwjUf0s9z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42433774add8aa0056e8bcc1f7976f27_JaffaCakes118

Files

42433774add8aa0056e8bcc1f7976f27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

813e78b625f141449a7d4f35cf7a70e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetCalendarInfoW
LoadResource
FindResourceA
SizeofResource
LoadLibraryW
LoadLibraryExW
GetModuleHandleA
GetStdHandle
HeapAlloc
LeaveCriticalSection
EnumResourceNamesA
SystemTimeToFileTime
GetVersionExA
lstrcpynW
GetProcessHeap
CreateFileW
FindFirstFileW
LockResource
HeapFree
WriteFile
HeapDestroy
CloseHandle
GetSystemTime
FindResourceExA
TerminateProcess

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ