166d008e124ce85aa22ee330bfa658c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

166d008e124ce85aa22ee330bfa658c8_JaffaCakes118
Size

107KB
MD5

166d008e124ce85aa22ee330bfa658c8
SHA1

36241b166aa60c9b199a4b566609435d182ca4c8
SHA256

1dde31b4ffe720acd2e10747425c3678951fb4b0053f9a8352afd4c07224329c
SHA512

ad114386aebb7a6d5722dfb863f824f93e4652e50c7ea131236a78454bc63d0ba1f6d7b55df6c36981c1bf7214f34b39cb1b01505e3eee57bd2fbc0db8d4b9b8
SSDEEP

3072:WpaGfbtnmnE3XKW6ko0rlczo3WsHjcQ3WsknE3XmK/y8ETvChW:6NRmsD6oMicX7sxyChW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
166d008e124ce85aa22ee330bfa658c8_JaffaCakes118

Files

166d008e124ce85aa22ee330bfa658c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9376e6eac24855eaf2a7cdc50c7790f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
HeapSize
TlsFree
GetVersion
GetLastError
DisableThreadLibraryCalls
HeapReAlloc
GlobalAlloc
TlsAlloc
GetDriveTypeA
GlobalFree
GlobalUnlock
HeapAlloc
HeapDestroy
InterlockedCompareExchange
TlsSetValue
lstrcpyA
GetVersionExA
TlsGetValue
GlobalLock
GetProcessHeap
GetModuleHandleA

user32

SetWindowPos
CreateWindowExA

ole32

CLSIDFromString
StringFromGUID2
CoTaskMemRealloc
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitialize

oleaut32

LoadTypeLi
LoadRegTypeLi

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ