d65d7282da3eafc527d779d77cc5c59f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d65d7282da3eafc527d779d77cc5c59f_JaffaCakes118
Size

279KB
MD5

d65d7282da3eafc527d779d77cc5c59f
SHA1

f99cf0d041136684237c3cf750d22378673c5ad0
SHA256

f45ade7ef639ceef7f17d0245985fe82de3e769cfea76642a4652b6380b1697b
SHA512

9b78d27f9da2a5c138f7b42320fad73be0109f94277d19d6991307221d5ce903eeb925f2e8ec96890434d1d1eb3013346178e25cb20f7ef1389c7faca0183d1d
SSDEEP

6144:jwJnkhqdwiSaDfUnHS+dNSEOfj8wLIh6NoxGiqcqcYBGfiz5:sJ0qh7UnH9cYwL+qckNz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d65d7282da3eafc527d779d77cc5c59f_JaffaCakes118

Files

d65d7282da3eafc527d779d77cc5c59f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c4c792a1d3727a28a35186eed4b289d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
VirtualAlloc
VirtualFree
GetCommState
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayAccessData
SysReAllocStringLen
OleLoadPictureFileEx
ClearCustData
OleLoadPictureFile

msvfw32

ICInfo

Sections

.text
Size: 175KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ