8c99af1fe4867922436a61e70d281af2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c99af1fe4867922436a61e70d281af2_JaffaCakes118
Size

274KB
MD5

8c99af1fe4867922436a61e70d281af2
SHA1

24c21090a71ce117bd31da7b94f6d258cb2e9453
SHA256

b93d6bc4ea5acdce8537cb58d112a5df8c3f61bde251e0aaaf838a972a35ad56
SHA512

b4907e878e81f0195f6d587a625ef1144ce4fa4a155466c2cb9018aba45cc84cedb16cb3895860846065421b7b44fefbbfb61291d45540b6c55ed1777856a670
SSDEEP

6144:0SfLuKGFPOWVUI3Z2TldYta2u1NgoeO9tA2Mas00dHkeTJzZY:cK4932TPYtaJ1NgoX9tAHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c99af1fe4867922436a61e70d281af2_JaffaCakes118

Files

8c99af1fe4867922436a61e70d281af2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e707d7dc4e1519a431d7f4389a20628a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
LCMapStringW
GetACP
InterlockedExchange
WriteFile
GetStringTypeA
GetOEMCP
IsDebuggerPresent
GetCurrentProcess
EnumResourceTypesW
LoadLibraryA
VirtualAlloc
FindFirstVolumeMountPointA
GetStringTypeW
GetCPInfo
SetUnhandledExceptionFilter
LCMapStringA
RtlUnwind
GetLocaleInfoA

oleacc

GetOleaccVersionInfo
AccessibleObjectFromEvent

msimg32

TransparentBlt

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ