c0df375f5aed084216d76cce742250ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0df375f5aed084216d76cce742250ea_JaffaCakes118
Size

44KB
MD5

c0df375f5aed084216d76cce742250ea
SHA1

abad6fc24556a33012a977f67928b78945f3905a
SHA256

8bdb6dca75fc0d22f29048f76484fa7453eadeb227c3575dd862c25f516d45dd
SHA512

d0f5f481429da15f115600c9e20db393b3aa59da0527e4fc3edc876c050d28cd68f5fbd5b9fa7a52cbe97669413dfac037f6f3d523f023b3a6f850db3735624d
SSDEEP

768:m2RC3GbB84MxmZsedEm5oclCAkvX67t56jUC7Y7ln4ohHOnO1f7uzpGyP2ih:m283GLcm+cvkC7z6jUCCh48OnyDutth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0df375f5aed084216d76cce742250ea_JaffaCakes118

Files

c0df375f5aed084216d76cce742250ea_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fe91c44b848e1010b9e484763fe5a148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetFileSize
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

_XcptFilter
__getmainargs
__p__commode
__set_app_type
_cexit
_except_handler3
_stricmp
exit
isdigit
malloc
realloc
sscanf
strpbrk
vswprintf
wcscat
wcslen

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromCLSID
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ