786114588c952581ea1cef2c505a93f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

786114588c952581ea1cef2c505a93f9_JaffaCakes118
Size

42KB
MD5

786114588c952581ea1cef2c505a93f9
SHA1

898a07a20f5fd1d847755493c7f641c7dc50167f
SHA256

44c796557ec61a59e6b5656d4241f887a385f295bd146f75d1f897e2aa313bce
SHA512

79e9b0e6e79dc11ffd94cc4dc68d34424bc43515402d573e02cb2c9f770de7d87406bebc28bd98a6836140611221d6fc645f1bdcf5502ac020b387c73a6923bb
SSDEEP

768:B4cJrRZhocWKcwXRQVK3LC7wiV/jZlLddXHeBih:BNVRgtwByouwkTHrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
786114588c952581ea1cef2c505a93f9_JaffaCakes118

Files

786114588c952581ea1cef2c505a93f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fe91c44b848e1010b9e484763fe5a148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetFileSize
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

_XcptFilter
__getmainargs
__p__commode
__set_app_type
_cexit
_except_handler3
_stricmp
exit
isdigit
malloc
realloc
sscanf
strpbrk
vswprintf
wcscat
wcslen

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromCLSID
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ