677ed1992202080649c58a5001731fea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

677ed1992202080649c58a5001731fea_JaffaCakes118
Size

163KB
MD5

677ed1992202080649c58a5001731fea
SHA1

90c0c074a81ccd61ce767ecaf55cf1bc45bf8248
SHA256

2be0d4c6ae6ee134da3ffd69e83a75408a166d29d6a374777a9b6b91de188557
SHA512

347ccc5c8414d7b787f68a9fe0f626e15dfd11b28e3f210c3a48d8b09b456c676c1447bc3d1ae9898322129a478f26e631a6c66b875121c70acf8ca509b66b77
SSDEEP

3072:mOC6FTLZN21y89uslRu5KZYDCqWrXNBL6HPqJbX1FCiNcCr/QOSZ99fIz//nqpJ7:mYF3ZN21yklE5DD6rvCeSiNcCr/QOSZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
677ed1992202080649c58a5001731fea_JaffaCakes118

Files

677ed1992202080649c58a5001731fea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7327621913880b7bee1308dfdb4e0e51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
HeapAlloc
LCMapStringA
GetStringTypeW
SetStdHandle
GetStringTypeA
GetConsoleCP
EnumResourceTypesA
GetConsoleMode
GetLocaleInfoA
OutputDebugStringW
OutputDebugStringA
DebugBreak
FindFirstFileExW
LCMapStringW
GetTimeZoneInformation

oleacc

GetOleaccVersionInfo
CreateStdAccessibleObject

gdi32

GetStockObject

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ