76c2b0ea8e9506a95911e2ea98b40483_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76c2b0ea8e9506a95911e2ea98b40483_JaffaCakes118
Size

66KB
MD5

76c2b0ea8e9506a95911e2ea98b40483
SHA1

d6effcf9e8408aefae9edf1f171ddcf307c606dc
SHA256

da50ca8ab8ffda125cd823ae75a78b006a17595cdb02bf028ce3e2e6ab645a93
SHA512

2419c66a83a4898e7eb7473ecfaf19135498d054bcfe09d655050fa1783372a49c3b9a8bc4a3c89bbae1c6846a84d722d4226e52ac296bf8c9078d5e7a32b59e
SSDEEP

768:cKkZp9uRFlxoDSOWnyLjj6UaKdffi3ab1yPH1G/8ulCGsSRHu6Q3/YojZh0v:AZ2lxoLWy/j/aKdniG+snz6PYoUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c2b0ea8e9506a95911e2ea98b40483_JaffaCakes118

Files

76c2b0ea8e9506a95911e2ea98b40483_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6702aaf49eafc489a1511f89b84e6e3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
SetFileAttributesA
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
WriteConsoleA
GetStartupInfoA

ole32

CoInitialize
CoCreateInstance
OleCreate
StgCreateDocfile
CoSuspendClassObjects
OleInitialize
OleUninitialize

msvcr71

_exit
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
memmove
strchr
atoi
wcslen
exit
time
strncmp
fclose
__p__fmode
fseek
fopen
_c_exit
fwrite
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ