d09cd1c36b9f4dd77468281ae16f8bac_JaffaCakes118 | Triage

Sharing

General

Target

d09cd1c36b9f4dd77468281ae16f8bac_JaffaCakes118
Size

238KB
MD5

d09cd1c36b9f4dd77468281ae16f8bac
SHA1

6a445b90ac6fe890e0d9855b4d9fbea026cbc42f
SHA256

8d8b1cff65b8f9d74e13729edf0b69ef48eeeaabf83be95921260b43121d1c78
SHA512

804f2821c6c281c81497f5cb7fd7a64558715f0068bf5158bc77fb0c4767c6e90bfefadc677b456879247f4cca6699a8f7c77d713b5a9f49ed74497ffe1a8c55
SSDEEP

3072:PGXKi8M3qCDFFkl1u7QwpASBNLMVgjlfjm3AqfjVhfwW1+2atMKm7zb9fSxYivo/:+P8M3qCp0o712VEazrYuaCvuYiEJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d09cd1c36b9f4dd77468281ae16f8bac_JaffaCakes118

Files

d09cd1c36b9f4dd77468281ae16f8bac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48bca475f4a8154d94adb956a0a2daba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetModuleHandleA
VirtualProtect
GetConsoleAliasW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleW
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GlobalFree
GlobalUnlock

oleaut32

DispGetIDsOfNames
DispGetIDsOfNames
SafeArraySetIID
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

oledlg

OleUIBusyA

Sections

.text
Size: 141KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE