83104dd5a877b26fb056ce577ed4fcfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83104dd5a877b26fb056ce577ed4fcfc_JaffaCakes118
Size

253KB
MD5

83104dd5a877b26fb056ce577ed4fcfc
SHA1

dd0974887fa9dd933e13c10f5f1b500159441435
SHA256

882c3b545c94076b6806b70a55565bb8e3ecb5aa11054f504c48aaa037400a8c
SHA512

f4dae8efaa613f29337694d111bd7124b2563e66728180e24362da7d8fe1a3f500c89b7988184d8bc6b3100ace5496c67398443390d61075c36dcc89ff381f0a
SSDEEP

6144:x7dvi+JeRHVy6/Tx0doYnm9hfoXYrLsmPfBtP/mNzwXeBc3l:xRi+JeRHVbCvm9VoXYrwmht3OEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83104dd5a877b26fb056ce577ed4fcfc_JaffaCakes118

Files

83104dd5a877b26fb056ce577ed4fcfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0367fb00013934f67a48eecb8cdc3ade

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
RtlUnwind
CreateSemaphoreW
OpenSemaphoreA
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayCopyData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 140KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ