b6caa51e4c26532517fed99eac25f4b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6caa51e4c26532517fed99eac25f4b0_JaffaCakes118
Size

97KB
MD5

b6caa51e4c26532517fed99eac25f4b0
SHA1

c4b91b85bbbf02a2e1e56ac2b926cc51d6877b8d
SHA256

194efdff0d72b9c21baff770d022e93e24e6cd41413046c168ed11b2ebfccb68
SHA512

57a092f6a3e57b61a9432b51368c5ccbc59175e4a4259d1ff34e5c080c89bab4b554c5b106a7c05998c77d216ecb6bb8d528d578274ed9dcc390aeada061e22e
SSDEEP

3072:Viw9lkAEguiwbwNcYGqPN2mFRBEetOAr2iaCz7:VB9lkAubQGq2CRBlkAqiRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6caa51e4c26532517fed99eac25f4b0_JaffaCakes118

Files

b6caa51e4c26532517fed99eac25f4b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

934d5760fcf30a20e41a7803fed5215d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

CreateStdDispatch
SafeArraySetRecordInfo
VarNumFromParseNum
SafeArrayUnaccessData

msvcrt

_close
_chdir
_access
_assert

kernel32

FindResourceA
LockResource
ExitProcess
GetACP
VirtualAlloc
GetModuleHandleA

Sections

CODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 112KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ