cf7ab4af0c8657cff88853463c202199_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf7ab4af0c8657cff88853463c202199_JaffaCakes118
Size

372KB
MD5

cf7ab4af0c8657cff88853463c202199
SHA1

4afeaf577148512913a7f0dab7ca259eafb25fd0
SHA256

76a0a0d7bc5f75466ac608cddff06f2afd2a5180d7b75c4e63d442900c50bad0
SHA512

71b01083075cfe62e1b636de9e5ef82618e87e6d81888b9cb5ea6bc769b2696b42e341d46219a2e3be8e673e21ec1e6d43d6fb62a5748155dfd62e0704d9a813
SSDEEP

6144:5bTgV7fnQNvmUiBAak5+KVB0TelTd8MPNTPoLSD16UfropXRmWRMFn:JTgBnQNviqD8KVB0TelTd/NT2SDWXRmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf7ab4af0c8657cff88853463c202199_JaffaCakes118

Files

cf7ab4af0c8657cff88853463c202199_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab51c644bf7a124c3d690e489c6464f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

BindMoniker
PropVariantChangeType
CLIPFORMAT_UserFree

kernel32

VirtualAlloc
ExitProcess
LockResource
SetStdHandle
GetStartupInfoA
GetModuleHandleA
FindResourceA
GetACP
EnumResourceTypesA
EnumResourceNamesA

oleaut32

SafeArrayAllocDescriptor
SafeArrayDestroyData
VarNumFromParseNum
CreateStdDispatch
SafeArraySetRecordInfo

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ