ed3fcb4c6a79b25e7f2993b38481136f_JaffaCakes118 | Triage

Sharing

General

Target

ed3fcb4c6a79b25e7f2993b38481136f_JaffaCakes118
Size

274KB
MD5

ed3fcb4c6a79b25e7f2993b38481136f
SHA1

eee06943f300f791c2ce33df318e07a16288c448
SHA256

7014485f23b9e0f68f4c36f9fc9d4cc023447e59ed996dcaa83ef3940c74f5ad
SHA512

6415a74750eaa1516e8cebec83cf1ed1d8fc8af5c2ff8868203ebe779f2319e035a13be2df3ac0ab9664e96a01cb8f27045515c0cb8e030cb488182eed7b436c
SSDEEP

6144:1F0Pppe+THshLJXx6SPbdjrfd4arjt6Jt93sF6RY3QumMk2plqo:1FQvd01h6OZjzOSjt6o2YAz+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed3fcb4c6a79b25e7f2993b38481136f_JaffaCakes118

Files

ed3fcb4c6a79b25e7f2993b38481136f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

061bfb495956b89e507c41eb95815e6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetStringTypeA
LCMapStringW
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
InterlockedExchange
GetCurrentProcess
RtlUnwind
LoadLibraryA
EnumResourceTypesA
GetStringTypeW
FindFirstVolumeMountPointA
LCMapStringA
VirtualAlloc
GetACP
WriteFile
GetOEMCP
GetLocaleInfoA

oleacc

GetOleaccVersionInfo
AccessibleObjectFromEvent

msimg32

TransparentBlt

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ