eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118
Size

218KB
MD5

eefdb86c4358e31dab44a76a2b665de3
SHA1

9a346d81e8c9b310455b597f8cf06340522ebfe9
SHA256

cacceed08e3d1ae295f9c5ed321f6c50be21eb709dac269f360626610b465fa2
SHA512

bd33af35ddd9c99501df001cc5af2c97716551c470783b373833430ca3507f5dc243f1ba571adc1bc705cc55cd5e57169fe56c06f8a7003e282995da28f14845
SSDEEP

3072:iBC++ywahrekkgPBf1UG5J5lz8EkMg8mgkZoP5CB3iPejaj0WTYd+NCHVSZVFDA:iCbv2rekNzUG/5g0TB8b+0EYwlvDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118

Files

eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6f94d9719359700a4e710d9cb5160aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleFontInfo
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

Sections

.text
Size: 138KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE