4d32196d5c9d6b844982b7e3504fd8c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d32196d5c9d6b844982b7e3504fd8c8_JaffaCakes118
Size

179KB
MD5

4d32196d5c9d6b844982b7e3504fd8c8
SHA1

5952d37838279159943829fb3fc879285cc0d37a
SHA256

cfc36c6f887c0a3365c6a0c92d791ed5abef663393790203c663dd6dd69dd936
SHA512

a1d1474d7335436d337de98db8d7b7e12ee746a962a9d0054ef364857abdb4e86277b59a156d63f6e5bf39e3b487f560cc7fab917a668f90d52a037f6e56b541
SSDEEP

3072:ecbeNBtBisbJ9iMb21IUxRxha9oMxbojFlMMasihs9JlaUtYqNkV1g72pZ7QN5:ewebtBiU05RxhvF+kraUtp+gypZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d32196d5c9d6b844982b7e3504fd8c8_JaffaCakes118

Files

4d32196d5c9d6b844982b7e3504fd8c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

363513c32a41c549902ebc67d9bded51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
IsDebuggerPresent
InterlockedExchange
GetCurrentProcess
LCMapStringA
SetUnhandledExceptionFilter
RtlUnwind
VirtualAlloc
GetStringTypeA
EnumResourceTypesA
GetCPInfo
FindFirstFileExW
LCMapStringW
WriteFile
GetStringTypeW
GetACP
LoadLibraryA
GetOEMCP
GetLocaleInfoA

msimg32

TransparentBlt

oleacc

GetOleaccVersionInfo
AccessibleObjectFromEvent

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ