03ccf86de08305aa456b29a24450fa23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03ccf86de08305aa456b29a24450fa23_JaffaCakes118
Size

244KB
MD5

03ccf86de08305aa456b29a24450fa23
SHA1

b653a9d3f566db03f26e8c6989bf74e6c6df123f
SHA256

dec23e1dbe6402e248674cd939141c3e31e974f70b6c4cc78073d535dab1d7b5
SHA512

cf1f447ad1cdde7e4921f22ef1c306aaf1aea6109a6538cf5e9470495f7d33d5a75ef1c7ec487cf3186eb4fa4405ce8c20edd9148d6cd0afacf41ebf7d5c1630
SSDEEP

3072:rKqb3xped0Ra99BWenNvOkK3mXGij0aUvGKCrULyJsLn3raWJyiSBSFtIjN5EjbK:rF4nVlMvid3r0yJA3IsuzEjbLyq98br

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03ccf86de08305aa456b29a24450fa23_JaffaCakes118

Files

03ccf86de08305aa456b29a24450fa23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5465beb9d76814e402be624594b91089

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantClear
CoGetMalloc

oleaut32

SysAllocStringLen
VariantCopyInd
OleLoadPicture
SafeArrayPtrOfIndex
GetErrorInfo

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleHandleA
GetProcAddress
lstrlenW
GetLastError
IsBadReadPtr
lstrlenA
ExitThread
VirtualAllocEx
ExitProcess
GetACP

comdlg32

GetFileTitleA
ChooseColorA
GetOpenFileNameA

Sections

CODE
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ