099114680b72b2112fba103191154ba5_JaffaCakes118 | Triage

Sharing

General

Target

099114680b72b2112fba103191154ba5_JaffaCakes118
Size

21KB
MD5

099114680b72b2112fba103191154ba5
SHA1

d1989280931391bc192386166ad954394eebc21c
SHA256

e567b6318b567db6681440506ff0e713a1d437f5c3721c2a2618c56d2439693b
SHA512

4224cc7adc5bfe44c5af6cea0cc6ec5a5bd3a9a09264a593ad66ddbadd4570cd3ff3950d3d8621cd2959e9272ea9c94738e46d9442b82215a569a4b410c7b764
SSDEEP

384:EbrylwD/gdtWPiA3djfJg34fcP8kkPliRDTfOnmnmFtOdMhGKbJz:EbSwrgdyztLJLf9NITfOmsGEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
099114680b72b2112fba103191154ba5_JaffaCakes118

Files

099114680b72b2112fba103191154ba5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab58d0df9f3fd091b5d44769f93ba787

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
ExitProcess
CloseHandle
GetSystemDefaultLangID
GetVersion
GetOEMCP
SetConsoleCP
GetModuleHandleA
VirtualProtect
HeapAlloc
GetStartupInfoA
Sleep
LockResource
GetACP
HeapDestroy
DeleteCriticalSection
lstrlenW
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentProcessId
OutputDebugStringW
GetDateFormatA
GetProcessHeap
FindFirstFileA
CreateEventW
SetStdHandle

advapi32

OpenServiceW

ole32

OleInitialize
CoTaskMemAlloc

msvcrt

_XcptFilter

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE