38f838bbe9c3bf5a5e225982c4b30367_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38f838bbe9c3bf5a5e225982c4b30367_JaffaCakes118
Size

175KB
MD5

38f838bbe9c3bf5a5e225982c4b30367
SHA1

14b03747358367b75af5c617d8e429d116ca0406
SHA256

b27bf3b24d6518ebdc63145a051c8f07ac48aa225af4e4bb0631a63c3621d3dd
SHA512

97160d3172691cb4003ad1d2fab7a526683b5c71c2b8b9831ab019ea85e893be92c549a5c28d562ee495067b331c1d00cb7a99ef55636077c62c73fcb29774aa
SSDEEP

3072:Lu8MsX4PrUTpyw7vj89z74nEhg6/Hmhhe7hx3FjW3ydOT8kj:LuRu377nCpHmhEXjW3Jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f838bbe9c3bf5a5e225982c4b30367_JaffaCakes118

Files

38f838bbe9c3bf5a5e225982c4b30367_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2363b61767ee438747db5f3233074b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleSave
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

kernel32

LCMapStringW
LocalAlloc
GetCPInfoExA
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
InitializeCriticalSection
EnumResourceTypesA
LeaveCriticalSection
GetSystemInfo
EnterCriticalSection
LocalFree
GetLongPathNameW
GetLastError
GetModuleHandleA
DeleteCriticalSection
GetStringTypeA

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

GetDeviceCaps
GetTextExtentPointA
SelectObject
GetTextMetricsA
DeleteObject
CreateFontIndirectA

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ