c8688a6202f6e881ff30df933ea79e27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8688a6202f6e881ff30df933ea79e27_JaffaCakes118
Size

182KB
MD5

c8688a6202f6e881ff30df933ea79e27
SHA1

2b71d3bdedd506d363185f6691f8cdce187cc029
SHA256

d2e317d3501305b08cf6c4a63fedad59e6a28c4d0d43790e94784e28957b1e9a
SHA512

1a21ae42bb99c2b6a38acceef14434a1ef033ae3ddb5ac904422e932cdbce40b5b7d6591a8b9d83e951bc0334233ed37b0e3429ada5a042b01472f71ce010c23
SSDEEP

3072:FHmjLQmva9k1ii9ZGNtdJipgQH+OxNQh5Q++o/g2uc9NZNRBsUmCCfhspAvmLs:YLQ/k4ic/iG5OfQvX+ojuibjs5CC2C7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8688a6202f6e881ff30df933ea79e27_JaffaCakes118

Files

c8688a6202f6e881ff30df933ea79e27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1f4a5717ceb0d877e0bb9d930b6b360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleW
GetCPInfoExA
_lread
LocalFree
FindFirstFileA
_llseek
SizeofResource
RaiseException
GetCommandLineW
_lwrite
GetCurrentDirectoryW
EnumResourceNamesA
SetLastError
LockResource
HeapAlloc
FindFirstFileW
MultiByteToWideChar
FindFirstFileW
FindNextFileA
GlobalFree
HeapFree
LoadResource
FormatMessageW
Sleep
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ