af0015eeb111a381560989917e286862_JaffaCakes118 | Triage

Sharing

General

Target

af0015eeb111a381560989917e286862_JaffaCakes118
Size

103KB
MD5

af0015eeb111a381560989917e286862
SHA1

809c91c847dd80501745d6c7a0d4eca430784089
SHA256

eccf536a8f3630036c57bd9cfc7c1e817580bb927f5caa7ef296d0cee56e086e
SHA512

89fc28f0b9f64313f1716ab5d507a1fcaac458d7810c83dd52294973b6bf4b6b80868deb405390599a98b150a460210848378432efbb8f83029bd05ff3ad1a69
SSDEEP

1536:pMJasypAbvUERe+o22iyXfEWiMKt9vZq59OQm+kpXTdKWS9ArE4Hh:pYasyWbvV4W2iyXfJKt9xqPxkpAxSHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af0015eeb111a381560989917e286862_JaffaCakes118

Files

af0015eeb111a381560989917e286862_JaffaCakes118
.exe windows:4 windows x86 arch:x86

910c8b39ed7bc635a782bde25a6b7a29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

kernel32

GetCalendarInfoW
GetStdHandle
GetLocaleInfoA
HeapReAlloc
LoadLibraryExW
SystemTimeToFileTime
HeapSize
GetSystemTime
CloseHandle
HeapDestroy
EnumResourceNamesA
GetThreadLocale
FindFirstFileW
GetProcessHeap
LoadLibraryW
HeapFree
CreateFileW
WriteFile
HeapAlloc
lstrcpynW

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ