b51344f9f9d48379496efe6d384ea018_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b51344f9f9d48379496efe6d384ea018_JaffaCakes118
Size

177KB
MD5

b51344f9f9d48379496efe6d384ea018
SHA1

c62bd4443e19e71cbf66a54bc48b54979c1b6eb6
SHA256

4177144910259154b84458b9823325fc9024ddc48e0a5fe1b4a58b9d9dd82965
SHA512

5f62d073d6cd13cd46386d4715042788373c5c3d99874aad13999a232654e5ec1277708f658b6e07685e77b2e4d2bcf3e50c13569d9ca28930f3b7b7f91e4e60
SSDEEP

3072:ru8MFXHXXgF6W26MvtISSdtJ6sUmX9eAqZHWBSQMknR0heuRrC7t6xPbO2y:ru1oSITLV4QMmRBucZQPbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b51344f9f9d48379496efe6d384ea018_JaffaCakes118

Files

b51344f9f9d48379496efe6d384ea018_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae8a423220f4a35dd3a8ae15b0cc6366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleSave
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

kernel32

LCMapStringW
LocalAlloc
GetCPInfoExW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
InitializeCriticalSection
EnumResourceTypesA
LeaveCriticalSection
GetSystemInfo
EnterCriticalSection
LocalFree
GetLongPathNameW
GetLastError
GetModuleHandleA
DeleteCriticalSection
GetStringTypeA

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

GetDeviceCaps
GetTextExtentPointA
SelectObject
GetTextMetricsA
DeleteObject
CreateFontIndirectA

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ