dc123bbe2c80e22159e5154a5b337207_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc123bbe2c80e22159e5154a5b337207_JaffaCakes118
Size

132KB
MD5

dc123bbe2c80e22159e5154a5b337207
SHA1

2b2fdbc563872de4decffde1a717eb782473c219
SHA256

b001a437952ebcbdf5f23c5a12f2e313aac15450d69b9828a0e248fe2b3c06b9
SHA512

cf94e2339005583dc71eb7b45dabf52c41f43f4f3de6a75ca9d2d8ad64c858b71c97cc2d5c5ff65ea53ef8d1a46967504f371f76cbb3b853145325848c80e3ca
SSDEEP

3072:qB68LKATOpP3RUdh66+3WOWp+Hf10J/9MXfsN+iT/n:EkpPRUJIWOWpijXE+u/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc123bbe2c80e22159e5154a5b337207_JaffaCakes118

Files

dc123bbe2c80e22159e5154a5b337207_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43a8e9477b1ac339c07f34b519c85152

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

DisableThreadLibraryCalls
SetHandleCount
GetCommandLineW
GlobalDeleteAtom
TlsFree
GetStartupInfoA
SetLastError
EnumResourceNamesW
ExitProcess
TlsSetValue
TlsGetValue
HeapDestroy
TlsAlloc
HeapCreate
GetCommandLineA

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ