dbc32e0460e4cc628b2214cf1f5e93f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbc32e0460e4cc628b2214cf1f5e93f3_JaffaCakes118
Size

192KB
MD5

dbc32e0460e4cc628b2214cf1f5e93f3
SHA1

386cb074778a7fbad66af7d17c927eabeee4dd93
SHA256

4677487e563121a6c1dafc5083f2d551e2a2e4b48c5ac4d3fb10e1b767b69808
SHA512

b0c49dd4b55c69d7cf7d18308a54c1676952fed78a0940a2b60434ff8cf506d3fe7c8ded75066ca649b3821366dee4571861d2e2c71a8e52a36f0999d1822aa8
SSDEEP

3072:ekT3EoptnQZ7PfX0ucAyaF7+xUtBlVEl91hklvIgZVwKYdXHrePeEPAqjmJaij:ekZeXPyaFSxqBlm16lvHWKYd3IZPAlfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbc32e0460e4cc628b2214cf1f5e93f3_JaffaCakes118

Files

dbc32e0460e4cc628b2214cf1f5e93f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d7bb20ebf6a268ddf70d27ff8eba499

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoMarshalHresult
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoQueryProxyBlanket
CoTaskMemFree
CoCreateInstance
CoSetProxyBlanket
StringFromGUID2

imm32

ImmAssociateContext

kernel32

GetConsoleOutputCP
MoveFileW
SetEvent
SetProcessAffinityMask
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetCurrentThreadId
LoadLibraryA
GetLocalTime
SetStdHandle
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
WriteConsoleA
GetOEMCP
EnumResourceTypesA
GetCurrentProcessId
QueryPerformanceCounter
GetProfileIntA
CreateFileA
FlushFileBuffers
WriteConsoleW
GetACP
GetCPInfo
GetEnvironmentStrings
WaitForMultipleObjects
GetLocaleInfoA

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ