c8dfb242ddae8e9eacf848688b1f876b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8dfb242ddae8e9eacf848688b1f876b_JaffaCakes118
Size

175KB
MD5

c8dfb242ddae8e9eacf848688b1f876b
SHA1

113c5b3dfd8fb9beac9b04db6b725bf1397ea021
SHA256

4c9c533c7a9c7091d517b0fd1e8e35ee47c8f499795920e1ef70e81f5af5a5b0
SHA512

d247b9283e0b21f5d26c048aac2ae14de0c7d117275568655dbcc1887dcc23ecfee2cc878d0adece769c64648ab17c8b053390d600351c613f769783fbedda81
SSDEEP

3072:OU/Ocn1NwEQXf6jRJ8vbSFG3qPQE67nsDLqo/LTUptXQGzgb:OUmc1NwV6Mx3qPksDCpRVU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8dfb242ddae8e9eacf848688b1f876b_JaffaCakes118

Files

c8dfb242ddae8e9eacf848688b1f876b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ad94d7f6094ec89b64193e56d6412b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoQueryProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
StringFromGUID2

rpcrt4

UuidCreate

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

IsValidCodePage
GetCalendarInfoW
ReadFile
ExitProcess
SetFilePointer
SetEndOfFile
HeapSize
GetStartupInfoA
DeleteCriticalSection
GetCPInfo
EnumResourceNamesA
GetACP
LeaveCriticalSection
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
RtlUnwind
FreeEnvironmentStringsA
GetOEMCP
VirtualFree
HeapReAlloc
HeapDestroy
HeapCreate
RaiseException
SetEnvironmentVariableA

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ