a48b76d4ea9596fbc85b03a6cc5d28de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a48b76d4ea9596fbc85b03a6cc5d28de_JaffaCakes118
Size

274KB
MD5

a48b76d4ea9596fbc85b03a6cc5d28de
SHA1

2b0e86aae2becbaa8a83c8ad9372c1d50463431a
SHA256

da72b66e136dd7639d0c20c2f63b1774181b936834676432179e302d0e287dbe
SHA512

8e08fdba2effde12ca682b6a5d027ec02888b0e6d6fbb3812891c33847bf0ebf15c190716760f07f741cd271e17abc742ce2d365ba18411667ef4db51a07fd5d
SSDEEP

6144:QxTSdZMm2KRka9fRc/25GXhzPox4cz6wszu/0Hn6aAAMNqO/AUIZAu6mk:a6l2qkalGXFwh6w/Q6atM/oUIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a48b76d4ea9596fbc85b03a6cc5d28de_JaffaCakes118

Files

a48b76d4ea9596fbc85b03a6cc5d28de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

badc9b79cac3228b347565290cd9c9e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
HeapAlloc
VirtualQuery
QueryPerformanceCounter
IsBadReadPtr
GetSystemInfo
HeapAlloc
GetProcessHeap
EnumResourceTypesW
HeapValidate
ExitProcess
RaiseException
VirtualAlloc
FindFirstFileExW
VirtualProtect
SetUnhandledExceptionFilter
HeapFree

gdi32

GetStockObject

oleacc

GetOleaccVersionInfo
CreateStdAccessibleObject

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ