78aef6a47b54a800ddbfe1e88cf1f849_JaffaCakes118 | Triage

Sharing

General

Target

78aef6a47b54a800ddbfe1e88cf1f849_JaffaCakes118
Size

274KB
MD5

78aef6a47b54a800ddbfe1e88cf1f849
SHA1

4c867f8cecba0ebb019740142cdcdef3bdb48f11
SHA256

272e1bc3916076027d2bc8ab97fc46682b555b3369b9a86d8b9f61818c5e3fac
SHA512

a9ea8c42ab4899500f5ca2e0602d5e75e580580b514349c6a4ad6eb59da475aef3b47454409cbb23e137ca1123357244a3708e6c408431d8f7c7e8293f0bd615
SSDEEP

6144:FHGanr5dPh/VGpgB0ReFN+YYdECQ6W87iWAjLIjt7XS/:lxnl/VGWeUNa/ptOWAjLki/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78aef6a47b54a800ddbfe1e88cf1f849_JaffaCakes118

Files

78aef6a47b54a800ddbfe1e88cf1f849_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc0af31e3f4e421ca8eaf95df86328e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetCurrentThread
OpenProcess
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
CloseHandle
lstrlenA
GetModuleFileNameA
GetCurrentProcessId

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ole32

CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitializeEx

shlwapi

StrStrIA

psapi

EnumProcessModules
GetModuleBaseNameA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_rmtmp
fclose
fprintf
tmpfile
memset
exit
malloc
_except_handler3
rand
_exit
_XcptFilter
__p___initenv
__getmainargs

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ