469b708b6ba255800d133cc7c5ceb859_JaffaCakes118 | Triage

Sharing

General

Target

469b708b6ba255800d133cc7c5ceb859_JaffaCakes118
Size

274KB
MD5

469b708b6ba255800d133cc7c5ceb859
SHA1

b8925035a2fa3b611ff9cb3c8d1f0a56651dd227
SHA256

98f0d279c8d30af5ae4e61832150d337443f28ee40d638433334d55a97cf26d2
SHA512

69d0c1604fa46adfce0620dea3ec6882bea3e65780c183e2b51de5fc823e9768094fd5f67abedff36405ac6feead0bf7f91216631b61737ba37ccb6b1b998612
SSDEEP

6144:IRBNgbTRkegIBsDPXb8yuh0v4k5YG+GMsSmJY6HMWoS2KRB:IPNSdbof60wOY8MsLJlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
469b708b6ba255800d133cc7c5ceb859_JaffaCakes118

Files

469b708b6ba255800d133cc7c5ceb859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05df33a9eb4be794de8152c1c326dde7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
WriteFile
HeapFree
SetUnhandledExceptionFilter
RtlUnwind
GetStringTypeA
GetStringTypeW
GetCPInfo
EnumResourceTypesW
LCMapStringA
GetCurrentProcess
IsDebuggerPresent
LZCopy
GetOEMCP
InterlockedExchange
VirtualAlloc
LoadLibraryA
LCMapStringW
GetLocaleInfoA

msimg32

TransparentBlt

oleacc

GetOleaccVersionInfo
AccessibleObjectFromEvent

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ