b0faeaaf06dbeed77b2ff6d12c55f925_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0faeaaf06dbeed77b2ff6d12c55f925_JaffaCakes118
Size

163KB
MD5

b0faeaaf06dbeed77b2ff6d12c55f925
SHA1

e047c0a298ef16c870a781072012a3b55377ad3a
SHA256

5a5647507fd83ec7f3246c959b332aec821cd48f1aa777e83f32cc4870b1152f
SHA512

6a9717fd0f460dbb93cc149b579cfb650cb782390ae315cb2012695aec0ad0fb9710246fbf2a5897dd0030f5db8c35cd54309c4b6ab662de16e19def6795bf4f
SSDEEP

3072:TGlI/8wtQkhnoYiTvoBwjbFYfJ88uNfUgglOnFenN2O:TGlIUwtAYiTvfJYKFNsggwFC2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0faeaaf06dbeed77b2ff6d12c55f925_JaffaCakes118

Files

b0faeaaf06dbeed77b2ff6d12c55f925_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b2ba73a0a1d2af695c3ffb37daefc8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

HeapFree
GetCalendarInfoW
GetStdHandle
WriteFile
GetSystemTime
CloseHandle
SystemTimeToFileTime
LoadLibraryExW
EnumResourceNamesA
GetProcessHeap
HeapSize
HeapReAlloc
HeapDestroy
FindFirstFileW
GetThreadLocale
LoadLibraryW
GetLocaleInfoA
CreateFileW
HeapAlloc
lstrcpynW

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ