d4c6d2617ecb3e9092b19e2734c1cea7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4c6d2617ecb3e9092b19e2734c1cea7_JaffaCakes118
Size

173KB
MD5

d4c6d2617ecb3e9092b19e2734c1cea7
SHA1

fa1e74779804cc1c4c97f6fc018b3e82999a7a04
SHA256

58914b856926e730fe29ca8a574b418ff20c6c7d4f72da3be73cb52cef1bae87
SHA512

a265c2ecaee3bce9cf6f00ccd40914bfe35190947feee0c2e606af397a8fa8b756617c5d6b05a99df81a177251e9992dd1362f74a96bbe6bb1a317e5012998e8
SSDEEP

3072:NeMmkP7JvG7877LfMedWxqDtIbGqqT/MJZkjadWmZn3pjuj8AjHS75rpxB:5dGjuWTGqqT/IXd5R5ju4AI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4c6d2617ecb3e9092b19e2734c1cea7_JaffaCakes118

Files

d4c6d2617ecb3e9092b19e2734c1cea7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61c3642fe55da434fafe9966cb8daf6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

kernel32

GetCalendarInfoW
HeapFree
LoadLibraryExW
CloseHandle
GetThreadLocale
SystemTimeToFileTime
GetLocaleInfoA
HeapReAlloc
LoadLibraryW
WriteFile
EnumResourceNamesA
CreateFileW
GetProcessHeap
FindFirstFileW
GetSystemTime
HeapSize
HeapDestroy
HeapAlloc
GetStdHandle
lstrcpynW

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ