81cf990defc3edf7c0fc63dd4ba8f699_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81cf990defc3edf7c0fc63dd4ba8f699_JaffaCakes118
Size

165KB
MD5

81cf990defc3edf7c0fc63dd4ba8f699
SHA1

a570d87abdc64d3d309c7052f6b7c5a928cd6084
SHA256

16610ef237fce0a7f161a2d8f86deb0c14ada8cb9f9bbff49ecd556af673254d
SHA512

a5c00e005e4aaa5480ce83b384de119a3af9a19dedc57a1839a73dabbdbcd1f42661530dc8abf4cc8d1ab9daad9ea2ecd0c793d7eae605b8bba066ae3a9cd390
SSDEEP

3072:svwokHBWBDZCLZEWFmCHOPEy0xvvnyZzH:sv/khWB0aWccOPoyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81cf990defc3edf7c0fc63dd4ba8f699_JaffaCakes118

Files

81cf990defc3edf7c0fc63dd4ba8f699_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fdacccb263d0ae8a8acd993729bb92c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

shlwapi

PathFileExistsW
PathFileExistsA
StrStrIW

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

LockResource
HeapFree
GetCalendarInfoA
GetStdHandle
SystemTimeToFileTime
LoadResource
FindResourceExA
CloseHandle
lstrcpynW
LoadLibraryExW
HeapDestroy
FindResourceA
GetVersionExA
EnumResourceNamesA
LeaveCriticalSection
FindFirstFileW
GetSystemTime
HeapAlloc
SizeofResource
GetModuleHandleA
CreateFileW
GetProcessHeap
LoadLibraryW
WriteFile
TerminateProcess

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ