d01951844301c5386f6b9be138dbe917_JaffaCakes118 | Triage

Sharing

General

Target

d01951844301c5386f6b9be138dbe917_JaffaCakes118
Size

234KB
MD5

d01951844301c5386f6b9be138dbe917
SHA1

a79d518cb82485778bfdc593b0efefc785049afc
SHA256

e70b4babe583dadf429e82e71687b6eeb90f8e8856bcd9fccba23d30b4a9e405
SHA512

afcacdddcb45bcebd365973b33a57e385f957840412fdb80a28f17279f7c57d744623fa1a5062124776742b11451b466df5e0a13976ec3a758a075bb00203774
SSDEEP

3072:GIHAFtwFfbsoy/Dogae9ToxUfZVdPDZpOh5OYEPcC4lHSBHX8/HKFWgsveQsWt8e:ljsoODI1I3Pr0GUC41cHMvKFyve5WHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d01951844301c5386f6b9be138dbe917_JaffaCakes118

Files

d01951844301c5386f6b9be138dbe917_JaffaCakes118
.exe windows:4 windows x86 arch:x86

216bc0f9335386474124f107e0337320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleDisplayMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

Sections

.text
Size: 130KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE