c2535347427d0d13e22da9ff9436b2d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2535347427d0d13e22da9ff9436b2d9_JaffaCakes118
Size

174KB
MD5

c2535347427d0d13e22da9ff9436b2d9
SHA1

1fcda9b408db54c9e5533b9e9f18b4343a28e76b
SHA256

44cd4e92d51ea67f06904211e0963158635dab8229bec21ca3cc8c1e9f5b9c10
SHA512

b8a701e2e98d77348b6c98c22e95b21654d24f855a3d76770c29035ad62183c5d767dfe7d2f53a610779a520e1fcd17ddbf2943bffe237592a75070018f7d113
SSDEEP

3072:KHmjL2UW3piZv/CFwFiw3h2npoIi2WkI1mKcC6npzSXQjwAw/Deuik+4Bov73:FLmpGaGiwMnpuBi3bxSDeTky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2535347427d0d13e22da9ff9436b2d9_JaffaCakes118

Files

c2535347427d0d13e22da9ff9436b2d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1f4a5717ceb0d877e0bb9d930b6b360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleW
GetCPInfoExA
_lread
LocalFree
FindFirstFileA
_llseek
SizeofResource
RaiseException
GetCommandLineW
_lwrite
GetCurrentDirectoryW
EnumResourceNamesA
SetLastError
LockResource
HeapAlloc
FindFirstFileW
MultiByteToWideChar
FindFirstFileW
FindNextFileA
GlobalFree
HeapFree
LoadResource
FormatMessageW
Sleep
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ