ac0ba9e186aee9cf9889d71158485715_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac0ba9e186aee9cf9889d71158485715_JaffaCakes118
Size

492KB
MD5

ac0ba9e186aee9cf9889d71158485715
SHA1

7519ba3c58f313f20366ce461899745b70137d9a
SHA256

c601f1fc4efd018b10876ec66d35a462604f0c680ab738a4a36bd313a993bb96
SHA512

0de4f2f55bdd8cf924ac754e564b004a9ca30e212cfc0167ac014d0ad65bfb48d048b2f2cf869eaab5b19107bb9d1635e6e7a71a8ea1d4559002f354c14eb4cb
SSDEEP

6144:eeKSbdAoAB2UCJBFzQUNmsxmGBVFebA3LfXeFCzQ2GSuhZgfKrDhUxYnm/R9y4iQ:RGzoJPMsresGFeputiem+hL4ppPTnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac0ba9e186aee9cf9889d71158485715_JaffaCakes118

Files

ac0ba9e186aee9cf9889d71158485715_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eec21739925363d86476e18d7040a963

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumPropsA
DlgDirListComboBoxW

dnsapi

DnsReplaceRecordSetW

kernel32

GetLastError
VirtualAlloc

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance

wmi

ProcessTrace

esent

JetOpenFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 343KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ