b5c785d43c09b7b3d858b451b075a962_JaffaCakes118 | Triage

Sharing

General

Target

b5c785d43c09b7b3d858b451b075a962_JaffaCakes118
Size

264KB
MD5

b5c785d43c09b7b3d858b451b075a962
SHA1

04e3afe6cd5d3eafc824e7d4478066a817c44773
SHA256

9b77714daedbb55ae2dc54555ebc426bb86b7cf2860f35c82f64e02e18ef89ea
SHA512

40fc798749935da6a645c5d212cd7815eaf8e6effef8ad76a3bab8159265147da6e9685f231406723049b76c9b1b74d2053aa09da2ccd4cfabbb894c43b393fb
SSDEEP

6144:mAAExK5ufKof8a60u0tof2cPc4F5jOUJtM3ZtyXC4ScK73:vAN8f4CuyoV5jfJq3LyXC4ScE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c785d43c09b7b3d858b451b075a962_JaffaCakes118

Files

b5c785d43c09b7b3d858b451b075a962_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f2fe77d6dff0c19621adbb11f5f1af4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
RtlUnwind
CreateSemaphoreW
OpenSemaphoreW
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayUnaccessData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 185KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ