61a5d40f5fd85fb0c9e5eef028553514_JaffaCakes118 | Triage

Sharing

General

Target

61a5d40f5fd85fb0c9e5eef028553514_JaffaCakes118
Size

274KB
MD5

61a5d40f5fd85fb0c9e5eef028553514
SHA1

7a58ad1edfbbdd83e0973124716cbeba37607747
SHA256

45e92d397fa8ec786aebc5f1003240b3f2d5e5cdf6bda26c13f051fdfad0e520
SHA512

ca108180735d3a6f4cad40f43e69d60b091c7f7d4ea10cbb0d48c50527a35255d450a235218c167703a54b599ca3dfcd1db143c74ccf35a9a86dc710d8564e4c
SSDEEP

6144:MoVQ5qrBOcAetyoASi6VYSB3Ij9jnqtmlC151Pt9Nmf68N:MmApesi3LB3m7H67Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61a5d40f5fd85fb0c9e5eef028553514_JaffaCakes118

Files

61a5d40f5fd85fb0c9e5eef028553514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f62c3981a728d8b864a2bd7b8397ad3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetACP
VirtualAlloc
IsDebuggerPresent
LCMapStringW
InterlockedExchange
EnumResourceTypesA
GetCPInfo
GetCurrentProcess
WriteFile
FindFirstVolumeMountPointA
LoadLibraryA
RtlUnwind
GetOEMCP
LCMapStringA
GetLocaleInfoA

oleacc

GetOleaccVersionInfo
AccessibleObjectFromEvent

msimg32

TransparentBlt

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ