faf8db027408575c7f6178890e2a9058_JaffaCakes118 | Triage

Sharing

General

Target

faf8db027408575c7f6178890e2a9058_JaffaCakes118
Size

125KB
MD5

faf8db027408575c7f6178890e2a9058
SHA1

e22dc27f9528adf96cad0039eaea83f5b1523510
SHA256

533020ef7182401d4cb5bdf8324f835a9e9edcb23b9a7f0485721cdcf58f532d
SHA512

c996edf150d3978d5dc65901e9c325818dc495d621d7ce286987c28b638a190d20f4494a8cd6b3c52be9b3b5da646ed51cb5da547ce0d234e2520860397122e3
SSDEEP

3072:zVvRYdan7my+GSIL++YATge3z+WW5v8Mlx:zVvSQn7HL+YkVn8ox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf8db027408575c7f6178890e2a9058_JaffaCakes118

Files

faf8db027408575c7f6178890e2a9058_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2deeb5f52ca1cb5374454877c793241a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

DisableThreadLibraryCalls
SetLastError
SetHandleCount
GlobalDeleteAtom
TlsGetValue
HeapCreate
HeapDestroy
EnumResourceNamesW
ExitProcess
TlsFree
TlsAlloc
GetCommandLineW
GetStartupInfoA
TlsSetValue
GetCommandLineA

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ