8860573782b1a6c5d6c36a63799b0e55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8860573782b1a6c5d6c36a63799b0e55_JaffaCakes118
Size

274KB
MD5

8860573782b1a6c5d6c36a63799b0e55
SHA1

71711fef3dc8b7bf8b260482e56f52a3ac7655d5
SHA256

20bd7966797a74b663b1b5aca668c93556562d1e169397cd329ebd39be385f49
SHA512

5efeb32879f989e51f72b7d5033f5b5e12128b53d4d8429972289c756eeac6e0dee8e2a300765a55e71372815e7f97edaa7cc044d53bfd971a495ca766f2e5d6
SSDEEP

6144:hz9jZolIBZ01sHat/BAaf0AlHw8SRWh4:h4lIB21VDfNy8cWh4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8860573782b1a6c5d6c36a63799b0e55_JaffaCakes118

Files

8860573782b1a6c5d6c36a63799b0e55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0825e983c7ec8671299d3fe45eee2662

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapAlloc
IsBadReadPtr
GetProcessHeap
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetSystemInfo
VirtualProtect
RtlUnwind
ExitProcess
EnumResourceTypesA
FindFirstFileExA
VirtualQuery
VirtualAlloc
HeapValidate
RaiseException
HeapFree

oleacc

GetOleaccVersionInfo
CreateStdAccessibleObject

gdi32

GetStockObject

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ