0322c084c320de18f1a7e1d6508953c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0322c084c320de18f1a7e1d6508953c7_JaffaCakes118
Size

251KB
MD5

0322c084c320de18f1a7e1d6508953c7
SHA1

60fcc5b711cd1a7781914beb35d7c1b0f2f0653a
SHA256

6076e9210430c2814d4c46787582475cf94d5e17fa8814e21d4dc67d9d2a74d3
SHA512

d92298279623b9cb63e393e95648ff577f5f01060e4e753380d7b223a1c13f6fd2dc49a8dca3bc512278202298d225d04e6910394eb0cdd34e4c57aaf7e21e0f
SSDEEP

6144:q8+RKARIUI078xlG+ypz5ibgGplBtGqXTih3l:msJU978xlG+czxIAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0322c084c320de18f1a7e1d6508953c7_JaffaCakes118

Files

0322c084c320de18f1a7e1d6508953c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05197b9cef0027a27c1aae15d78cc47b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
AttachConsole
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
CreateStdDispatch
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 122KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ