b3700a2cc67b4a40281ce4a4573b6687_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3700a2cc67b4a40281ce4a4573b6687_JaffaCakes118
Size

119KB
MD5

b3700a2cc67b4a40281ce4a4573b6687
SHA1

5ef43ca0bce40e5ac61ff81c7f87ccffd83a620e
SHA256

f45c7e4de372c2203dbe325b5e1f1a3339048575b91c1871f1cb2aba90c4c483
SHA512

dd086440b90230d165433cf40050a6f03130225871a94ad81cd3ac12b61b6491fe53708a9c0701f1781b80f8ddb17599370d3deaece32e565e74a469e8044c75
SSDEEP

3072:iYvRb73qntWyeqhjtMMZU1ukUqLmvMd9WGudy7Vncnvn:/0teq7TUnUkmvMdedy+vn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3700a2cc67b4a40281ce4a4573b6687_JaffaCakes118

Files

b3700a2cc67b4a40281ce4a4573b6687_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2a72e426a60c41a2d144f051bce2c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

TerminateThread
TerminateProcess
GlobalDeleteAtom
GetTickCount
EnumResourceNamesA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ