774f11cd21b749e6188f543e9e71c2e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

774f11cd21b749e6188f543e9e71c2e9_JaffaCakes118
Size

176KB
MD5

774f11cd21b749e6188f543e9e71c2e9
SHA1

c00566bcea8fe310c56c25d9c959fe5464767da1
SHA256

13e393779f1a1821153abacc86450559994eae79952917a74f6c6ca344f5c987
SHA512

22dc7153ec08940ce5e275d8dbd869defda18b94bf2219c33640eec19b94ae4fbfcde9cd09e1bb27df7bb57dbc482bfea4278778dfcdca331ac2197ee649e59d
SSDEEP

3072:oHrFFb8KCbbQFvBiR9RLpjbZM26si+ZE7EqfBjfC+SPRcAwT9bLQ5K:oH5p81uvITRLp3ZAvmE7EEVC+2PwT9LW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774f11cd21b749e6188f543e9e71c2e9_JaffaCakes118

Files

774f11cd21b749e6188f543e9e71c2e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e2c15906dfb66fb73351dcf508104f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

SystemTimeToFileTime
GetCalendarInfoW
LockResource
HeapFree
GetStdHandle
SizeofResource
WriteFile
CloseHandle
GetModuleHandleA
LeaveCriticalSection
HeapDestroy
GetSystemTime
LoadResource
EnumResourceNamesA
FindResourceExA
CreateFileW
FindFirstFileW
GetProcessHeap
HeapAlloc
LoadLibraryW
LoadLibraryExW
FindResourceA
GetVersionExA
lstrcpynW
TerminateProcess

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ