07159846b125cc2ed630965f08131b39_JaffaCakes118 | Triage

Sharing

General

Target

07159846b125cc2ed630965f08131b39_JaffaCakes118
Size

181KB
MD5

07159846b125cc2ed630965f08131b39
SHA1

58f9daefda4768c33c04a5dfbf92abd877c05d31
SHA256

e6ff2232a84f551491ca4342b49a8cd260fa5615b26e4d54d0a5f7386adab162
SHA512

08acd83de2f18bd1a4ced8d46327f994ce743ea85cd05b68d68e25e3ef6dcd78e2e687626b7e55db1b4385d6614c056074ad4939eaaa46009b11ed42c4979a9e
SSDEEP

3072:oFU88rTSCEEkBmwOVYrPBlGRg9t7TbQxkfOGdI/SAuU:oF/8sx+6iRgPDfR6SAuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07159846b125cc2ed630965f08131b39_JaffaCakes118

Files

07159846b125cc2ed630965f08131b39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16f25c5102f4b67f64859dee36ecc3e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetCalendarInfoW
RtlUnwind
EnterCriticalSection
HeapCreate
DeleteCriticalSection
HeapSize
GetOEMCP
HeapReAlloc
GetStartupInfoA
GetCPInfo
EnumResourceNamesA
VirtualFree
IsValidCodePage
GetACP
LeaveCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsA
ExitProcess
ReadFile
SetEndOfFile
VirtualAlloc
SetFilePointer
HeapDestroy
RaiseException
SetEnvironmentVariableA

ole32

CoGetMalloc
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoQueryProxyBlanket
CoInitializeSecurity
CoSetProxyBlanket
StringFromGUID2

rpcrt4

UuidCreate

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ