bab93e88d55aaafb2d6b16b9f890c1a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab93e88d55aaafb2d6b16b9f890c1a2_JaffaCakes118
Size

244KB
MD5

bab93e88d55aaafb2d6b16b9f890c1a2
SHA1

245bf5dea8ca210aefc7d7da17240097805c5784
SHA256

df5a908417752eb5440080304c0f09f99f59f24a061c31490dbe691e5660c834
SHA512

de83ac1ca54544258f6d1c80cdaf936c9560d213a048b94dcb97124a05aecf86352187520fce028a0e1c360452947d24cb7f335302d5a971f3d80215bc9b0736
SSDEEP

6144:G+/4xsfZ171ZzpL8HkfTiJ0MIC6PF7FlcVSaLWTmsrvlf8PzS:G8HnzN8HKO6PFRCfOhpkPzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab93e88d55aaafb2d6b16b9f890c1a2_JaffaCakes118

Files

bab93e88d55aaafb2d6b16b9f890c1a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

846dfa2fb02d4bd9e0fc55d4c5a64361

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
FlushConsoleInputBuffer
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
OACreateTypeLib2
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

shlwapi

PathIsUNCW

Sections

.text
Size: 124KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ