93af88a311cbf0564986c5759d95b5f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93af88a311cbf0564986c5759d95b5f5_JaffaCakes118
Size

164KB
MD5

93af88a311cbf0564986c5759d95b5f5
SHA1

b14ef64a61ff7ddccebf0f516fbcc72fd2dc272c
SHA256

a64aebebd0ecfb4070ffd88f2be80264f4abe3cd3cf62c2aa33d64525c5b4c07
SHA512

42dff94b9d427a6a4febea89441247fe2f5ee9fcacd3b76d4d32981a09ffe45fca126ae11e7cc0ed661b6172fff6bcfa02f1f73e810720bbbe10cdbd6f0857f6
SSDEEP

3072:tpnn3refzf/VaGa64ZwdqnTdygdp4UQP0kPChu8dzdV8IqxgYkQztinLV:XnqrJazFdAP8dz/NqmYjinL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93af88a311cbf0564986c5759d95b5f5_JaffaCakes118

Files

93af88a311cbf0564986c5759d95b5f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b73525c336e84bf9caae610cc6996f89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

CloseHandle
LoadResource
GetCalendarInfoA
LoadLibraryW
SizeofResource
CreateFileW
GetSystemTime
lstrcpynW
LeaveCriticalSection
FindResourceExA
HeapAlloc
GetProcessHeap
WriteFile
EnumResourceNamesA
LockResource
FindFirstFileW
SystemTimeToFileTime
GetStdHandle
HeapDestroy
GetVersionExA
HeapFree
GetModuleHandleA
FindResourceA
LoadLibraryExW
TerminateProcess

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ