422a92af62047bd9e4846b579330e8fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422a92af62047bd9e4846b579330e8fb_JaffaCakes118
Size

175KB
MD5

422a92af62047bd9e4846b579330e8fb
SHA1

a984dec7021c044b8de29a53329eb797d6600685
SHA256

b5de209d4c1f56e2fbae0c5073f32acf0d7f0ff46671b7b72417e34f91e02af5
SHA512

0f83b5ef355c7ec1f258c7bae090ac562ab2255f4df6536c7fdf1aa6341a82adc84aee36e1e3b915dd3fb53de41b0ae7bb587aac28f32f49c13068494e7c2e22
SSDEEP

3072:spANRzz6HY2W8eMFyIe0d9OpXdG8P+g5DwZtP0+c5+oAFKfBrK6/ytN:sGNRzR21eyd9AGBQcZtP0qo7rK66t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422a92af62047bd9e4846b579330e8fb_JaffaCakes118

Files

422a92af62047bd9e4846b579330e8fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c94574e211c1bbbf8e2ecf2316f64c94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

kernel32

SizeofResource
GetCalendarInfoW
FindResourceA
CreateFileW
lstrcpynW
CloseHandle
GetProcessHeap
LeaveCriticalSection
GetStdHandle
GetSystemTime
EnumResourceNamesA
GetVersionExA
LoadResource
GetModuleHandleA
FindFirstFileW
SystemTimeToFileTime
HeapDestroy
FindResourceExA
LoadLibraryExW
LoadLibraryW
LockResource
HeapFree
WriteFile
HeapAlloc
TerminateProcess

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ