a31760174561932155c644817cab631c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a31760174561932155c644817cab631c_JaffaCakes118
Size

171KB
MD5

a31760174561932155c644817cab631c
SHA1

d796efc3af564448412667d0c16b50c4f15af1e4
SHA256

1dfe3d5190c088d797e195586880f78b3e8cf1dd88e7596d0eb51d5e094355af
SHA512

ad079024cd81a99ca40d52ea001d7d9f5137139830e123a5e02202cf7e7b7a85a21c710a93f895e95e954b420fd43484799cbbaf993daa463eb4560fdad08007
SSDEEP

3072:i1SLBSMwluZnm/rXg/4vcwwwSZBzXLXHvFCUo6rkte37+Nu5jAJuT:6SLInZrX1cnwSv7XPUUoZAL+N6jA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a31760174561932155c644817cab631c_JaffaCakes118

Files

a31760174561932155c644817cab631c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddb21b324f58f59a3bdf54db87cd9358

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoQueryProxyBlanket
StringFromGUID2

kernel32

RtlUnwind
GetCalendarInfoW
GetOEMCP
HeapCreate
InitializeCriticalSection
GetCPInfo
SetEndOfFile
EnterCriticalSection
HeapDestroy
SetFilePointer
EnumResourceNamesA
DeleteCriticalSection
ReadFile
LeaveCriticalSection
HeapSize
RaiseException
FreeEnvironmentStringsA
VirtualAlloc
GetStartupInfoA
GetACP
HeapReAlloc
IsValidCodePage
ExitProcess
VirtualFree
SetEnvironmentVariableA

rpcrt4

UuidCreate

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ