45bd3c5f66687a91d8cba1b74d1d086c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45bd3c5f66687a91d8cba1b74d1d086c_JaffaCakes118
Size

165KB
MD5

45bd3c5f66687a91d8cba1b74d1d086c
SHA1

8b12919e1ee8e24ab00f7ba015d52c4dee658238
SHA256

d80aa782f3eb7fa8bf8a467b5e51176f1b2a1bd2ff942c5b56f81f0a39d0756e
SHA512

a8730da31e797ba9993411f2507fc20e727ba4639e53088880c010a40e2498dcf228fe61257bd14383d645c8051328561db7715de0be148964a53837cd21a405
SSDEEP

3072:3o9+kfLv2JsUA0t1ZtZbX8RD4vXRgtmphgiat9i+4c7c3u8:YoGv2JsUAEZbA4vGtEgiat9i9ru8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45bd3c5f66687a91d8cba1b74d1d086c_JaffaCakes118

Files

45bd3c5f66687a91d8cba1b74d1d086c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f117f8a9e2c32d3935ef040ede52b432

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

kernel32

HeapDestroy
GetCalendarInfoA
SizeofResource
CreateFileW
GetVersionExA
LeaveCriticalSection
LoadLibraryW
LoadLibraryExW
CloseHandle
FindResourceExA
SystemTimeToFileTime
EnumResourceNamesA
HeapFree
lstrcpynW
LockResource
WriteFile
LoadResource
FindFirstFileW
GetStdHandle
FindResourceA
GetModuleHandleA
HeapAlloc
GetSystemTime
GetProcessHeap
TerminateProcess

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ