8dc352e33a12a4a6d8643c8587da3ff3_JaffaCakes118 | Triage

Sharing

General

Target

8dc352e33a12a4a6d8643c8587da3ff3_JaffaCakes118
Size

248KB
MD5

8dc352e33a12a4a6d8643c8587da3ff3
SHA1

cc4e80a362cfdcaf6c83d58bcecc2e2edfd28749
SHA256

55871dae710612cf896d93149d8b46e39b3e3e8c69696c6306e899a705daff8d
SHA512

7cb3a157bc4adf8e6038acac04c89a5209eb466909b11891f84fe6dca7fc8d70fea23901e7120c39fb4fb4a75106542fe25d9cef1d476c5a0f49f264cb10c493
SSDEEP

6144:fmlOKAHEffeFGrov5ow0SLOeUE10ceLIvF2k:fmYfHcfwLBtx6s0ceLIvQk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc352e33a12a4a6d8643c8587da3ff3_JaffaCakes118

Files

8dc352e33a12a4a6d8643c8587da3ff3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9caf04a005a9a129b892df2f480cb43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW

kernel32

LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetFileAttributesA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer

oleaut32

DispInvoke
OleLoadPicture
OleLoadPicturePath
RevokeActiveObject
SetErrorInfo
VariantClear
SysReAllocStringLen

shlwapi

PathFindExtensionA

Sections

.text
Size: 149KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ