bd3caeb87d3569b75d87e40bcc5f9671_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd3caeb87d3569b75d87e40bcc5f9671_JaffaCakes118
Size

272KB
MD5

bd3caeb87d3569b75d87e40bcc5f9671
SHA1

78286b079af5cf385c517b53159c8e83b8f37575
SHA256

40964783f3c1c68952eef41b34aa0a524bca83d82f29270088bd7304e7b1d585
SHA512

e0e991a9a2fa88f497613e0a6fba1d9f681d603b4f568ff825f119fcfc31a30e8d8f8e488e96cf0a916e8dfd3d0f823319eb3acd7f6676bf3f121b365c405457
SSDEEP

6144:3VGnKbmvSrcE7AH31UYB4gOx5ED5jrq5BLBaZRBK6AD0wub1Y6:3V3MMAFUYWfx5ED5oBaZRQ6iqb1p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3caeb87d3569b75d87e40bcc5f9671_JaffaCakes118

Files

bd3caeb87d3569b75d87e40bcc5f9671_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d999fc8931e2177a5369e67357afe618

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
VirtualAlloc
VirtualFree
OpenEventA
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayAccessData
SysReAllocStringLen
OleLoadPictureFileEx
ClearCustData
OleLoadPictureFile

msvfw32

ICInfo

Sections

.text
Size: 163KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ