e0159fda4b53af4f115c4893c3d303a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0159fda4b53af4f115c4893c3d303a4_JaffaCakes118
Size

215KB
MD5

e0159fda4b53af4f115c4893c3d303a4
SHA1

75366491aa12e6074547e9f27d00bdd24d913c9a
SHA256

4b239cb54c6d92d5fbafac788a6a7e011fe06dc1b89cf672c0daa6027b46ee3c
SHA512

61fd76a0ab29abd9d16190054b4c4dfb151e784a6bce8374a61f37ffa95e801fdcd9bd7f59326434f4efee35c54a9d4165133887bc5e0118804431fbd613554a
SSDEEP

3072:PGXKi8M3qCDFFkl1h7QwpASBNLMVgjlfjm3AqfjVhfwW1+2atMKm7zb9fSxYivom:+P8M3qCp0/712VEazrYuaCvuYiE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0159fda4b53af4f115c4893c3d303a4_JaffaCakes118

Files

e0159fda4b53af4f115c4893c3d303a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48bca475f4a8154d94adb956a0a2daba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetModuleHandleA
VirtualProtect
GetConsoleAliasW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleW
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GlobalFree
GlobalUnlock

oleaut32

DispGetIDsOfNames
DispGetIDsOfNames
SafeArraySetIID
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

oledlg

OleUIBusyA

Sections

.text
Size: 141KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE