dcb1c74cfcdb38f44ec32038326d2bf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb1c74cfcdb38f44ec32038326d2bf2_JaffaCakes118
Size

164KB
MD5

dcb1c74cfcdb38f44ec32038326d2bf2
SHA1

33b7114570e3c80146cc8bedacb62b2d83ef759f
SHA256

df9134d6f123900e2bc0041e2b843c13228a16ea4783627daa4ccc6566b72623
SHA512

570bf39d8aca93b6b11f525d19263a55e102544f9cb8482fb2a1166590b895689920766c344432cecf34e946513f251d3f3e1524df5967d38c976e6de909561f
SSDEEP

3072:V+Myf5sifqngA7sVR4p7SXzCQ04wdQ9yBNwqk5sv6gCYolfkTpw4H:VRyeifqnuVO7SeQ04wd7BXOgCYBZH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcb1c74cfcdb38f44ec32038326d2bf2_JaffaCakes118

Files

dcb1c74cfcdb38f44ec32038326d2bf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e56210372bc5684d2fdf977d9f0537d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetCalendarInfoA
LoadLibraryW
SizeofResource
GetStdHandle
LoadLibraryExW
FindResourceA
LockResource
CreateFileW
GetSystemTime
HeapDestroy
lstrcpynW
EnumResourceNamesA
FindResourceExA
SystemTimeToFileTime
HeapFree
GetModuleHandleA
FindFirstFileW
WriteFile
GetProcessHeap
LeaveCriticalSection
CloseHandle
LoadResource
GetVersionExA
HeapAlloc
TerminateProcess

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ