0b6d0c5f1c6c978b323aa737132bc046_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6d0c5f1c6c978b323aa737132bc046_JaffaCakes118
Size

171KB
MD5

0b6d0c5f1c6c978b323aa737132bc046
SHA1

afc00c333158a0ae2074dfb1be3384d5ad8636e3
SHA256

aa338dfa6b6059c2ff240ca482177c38c4b440ab2d1a6940f901192e9e15015a
SHA512

80eb78779a9ecdc0171aada822e3f863bf6ecef460c4033f366320a6ab9b8e2d86689cb94eb38d2a685562f57e56a0186c8ecfcbc6a906145f64c41996d0a206
SSDEEP

3072:shiTm3SUAh+GU1wijPj3IpgdKxLTTsatKOOy+:sPf4cC4UpgdiHTsoYy+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b6d0c5f1c6c978b323aa737132bc046_JaffaCakes118

Files

0b6d0c5f1c6c978b323aa737132bc046_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d327c7795dbf39bc331da443d66967bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
GetCalendarInfoW
GetCPInfo
LeaveCriticalSection
HeapReAlloc
EnterCriticalSection
VirtualFree
VirtualAlloc
SetEndOfFile
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
RaiseException
EnumResourceNamesA
GetACP
IsValidCodePage
FreeEnvironmentStringsA
ReadFile
SetFilePointer
GetOEMCP
HeapSize
GetStartupInfoA
RtlUnwind
HeapCreate
SetEnvironmentVariableA

user32

GetDlgItem
SendMessageA
CreateWindowExW
IsWindow
EnumChildWindows
DestroyWindow
GetWindowThreadProcessId

rpcrt4

UuidCreate

ole32

CoGetMalloc
CoCreateInstance
CoSetProxyBlanket
CoQueryProxyBlanket
CoInitializeEx
CoUninitialize
CoInitializeSecurity
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ