447a6f6251d6de29407dec3e14d3456d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

447a6f6251d6de29407dec3e14d3456d_JaffaCakes118
Size

73KB
MD5

447a6f6251d6de29407dec3e14d3456d
SHA1

bfec9bb539b9b33b50206889c5a52591d172b92b
SHA256

37924c89817586e2270663ff6d3f1f2a6c464f4b4a549bbf2b85fd6341e1f8ba
SHA512

84b12dae00d9b1e8eaa911f242e96687de046a35d14250eae8030742c85fdcaaa6d8699be770db08b7e335d3b58e2add74204ac7eea9fbc372584e5397832558
SSDEEP

1536:7uJADZvPyu89NAj/mgb9keoGTIMmKLSvcvcjpj6luOQft1:CAlXyN9Cj/vb+X8ITvqmj5OQft1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
447a6f6251d6de29407dec3e14d3456d_JaffaCakes118

Files

447a6f6251d6de29407dec3e14d3456d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e9741fc3d110cbb670745e7aff93e10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetModuleHandleA
GetCommandLineA
GetProfileStringW
GetStartupInfoA

ole32

OleCreate
CoInitialize
StgCreateDocfile
CoSuspendClassObjects
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc

msvcr71

_amsg_exit
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
_c_exit
_exit
_XcptFilter
_ismbblead
__p__fmode
exit
_acmdln
_cexit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ