c0216507a35c1441e13f0c2f7de59dae_JaffaCakes118 | Triage

Sharing

General

Target

c0216507a35c1441e13f0c2f7de59dae_JaffaCakes118
Size

113KB
MD5

c0216507a35c1441e13f0c2f7de59dae
SHA1

bc3d2ef9671464060a9858d685b3f7f0712c3ff5
SHA256

d7cb2b19a9a504ab704d65dc9fae645c80cf33edb7da97325e794f7c48270e9c
SHA512

21915e2440d24a42c9a2b25e5410fd70cdb41753c415f93d34aec8e59b2e19527063dfbce0333d12d2aa26f2fc77ed1f5e2354d3ae009a2fde09aa4a548de8e6
SSDEEP

3072:jC9tsuQ6VPeDZ1Ldqqn2momYohv0ENK6pnm0x/W:jC9Gv6VPeDtqqDomBh8I3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0216507a35c1441e13f0c2f7de59dae_JaffaCakes118

Files

c0216507a35c1441e13f0c2f7de59dae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a66849fa3ced1b03619e81ed92ec6aa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetContextToken
ReleaseStgMedium
CreateOleAdviseHolder
CoReleaseMarshalData
GetHGlobalFromStream
OleCreateStaticFromData
CreateStreamOnHGlobal

kernel32

VirtualAllocEx
GlobalAlloc
LoadLibraryA
DeleteCriticalSection
CreateThread
DeleteFileA
VirtualAlloc

advapi32

RegEnumKeyA
RegQueryValueA

user32

IsMenu
CreateMenu
GetMenu
CreatePopupMenu
CloseClipboard
CharLowerA

Exports

Exports

qZJvN0DHfAglQk@12
1NTozlSmUg
k0t59rpNKwzt
KoXl15bUU7@4
_dmLYa
_Jujj42K2b2uxbI@12
_Far2PbZS
ewBUnNvSG@24
_KM2SIJH@24
_92L3PDepy7
KlnwOMGbX
KJrUez
_9qdxFqsP3T5SX0
_pIndRYfN6LZ0x@8
_CQhzskvLSZ2
_H0Pn_
_zoMIQGCPfsFmW
x1cIS@16
_PsdJN5KJI@4
_CCmp2VEkHqxozD
BXehmLK9VFN1Xh
jZpXHqs6
mGg3q4Pz4
_jPNARH@20
23B40@8
zKLfjIAJu@16

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ