b767236c5f6b77757a40012eba4b9cde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b767236c5f6b77757a40012eba4b9cde_JaffaCakes118
Size

172KB
MD5

b767236c5f6b77757a40012eba4b9cde
SHA1

86bf5ba1a53403189ce15a5c0e649cc083516568
SHA256

5a5521313fd03b69be54f1c253333a03bdcc6be62c5fcd6e819b09db296cf578
SHA512

3257137033e41629fffeefea801fc73f61e1703095429f252b1db14893e79367798c9bf1e25ece3c84a907bfb20ececb553306cf1e2092ecc13e71c4c5d92226
SSDEEP

3072:Ju8M2vpUDCPApvoIetzmQE37wNAa1hVpDbPS0s+fSfeuYD11FTRbzk5a+LUzy:JumKvtgGrwN/FbK0KfsD11FTR/kAN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b767236c5f6b77757a40012eba4b9cde_JaffaCakes118

Files

b767236c5f6b77757a40012eba4b9cde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae8a423220f4a35dd3a8ae15b0cc6366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleSave
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

kernel32

LCMapStringW
LocalAlloc
GetCPInfoExW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
InitializeCriticalSection
EnumResourceTypesA
LeaveCriticalSection
GetSystemInfo
EnterCriticalSection
LocalFree
GetLongPathNameW
GetLastError
GetModuleHandleA
DeleteCriticalSection
GetStringTypeA

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

GetDeviceCaps
GetTextExtentPointA
SelectObject
GetTextMetricsA
DeleteObject
CreateFontIndirectA

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ