bb234ca67bf532862014cb9f0379d7c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb234ca67bf532862014cb9f0379d7c2_JaffaCakes118
Size

163KB
MD5

bb234ca67bf532862014cb9f0379d7c2
SHA1

4f3f945bea48e8a4f43bcd11c90ffa03103809ee
SHA256

11b08a1f99a37bc3484bfba1a33ffdc1e7563e2c4a268728a3f9218c43622b84
SHA512

16f180dfcd3a8b2a09f77461055243e57d7b17bd43d28eb1064d5fd8d1b6f868edb3155968e0bb1b67c4bac83363665d1e4a26e89df868bd206f09865320da26
SSDEEP

3072:WjHv/jj0+Pw1HUnTN6Gpg6V5xwQPkISEkGNBSOby:OHv/jY+4lUnTUDMuQcIQGNBBe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb234ca67bf532862014cb9f0379d7c2_JaffaCakes118

Files

bb234ca67bf532862014cb9f0379d7c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1812084f2d8f465d6c05e79cb193045

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

ole32

CoGetMalloc
CoInitializeEx
CoTaskMemFree
CoInitializeSecurity
CoQueryProxyBlanket
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
StringFromGUID2

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetCalendarInfoW
EnterCriticalSection
HeapSize
DeleteCriticalSection
GetOEMCP
IsValidCodePage
GetCPInfo
HeapDestroy
SetFilePointer
SetEndOfFile
EnumResourceNamesA
ExitProcess
RaiseException
RtlUnwind
VirtualFree
FreeEnvironmentStringsA
LeaveCriticalSection
InitializeCriticalSection
GetStartupInfoA
HeapReAlloc
HeapCreate
GetACP
ReadFile

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ