3fef05ca4227986ade2e8affecb17aa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fef05ca4227986ade2e8affecb17aa1_JaffaCakes118
Size

165KB
MD5

3fef05ca4227986ade2e8affecb17aa1
SHA1

af42a5eba69b3f040c2ad4abe041ef9313c7f245
SHA256

77645a72e75a3b18498a0952c0b52f37a9af447dc7f2af41e1ce551a6b324a7f
SHA512

c51d8769212810c4cdbc3386872a1147a3ed0ac1700d4bd515a84c363defcea912a6f1d3f0cd0c0eb21f9a03e6be65a74844fd86cebe52c736e849532740eef6
SSDEEP

3072:KhEJgRb7IeBsmQmsZV3yI0ODDNYWTdKTmIJAwl2JWOW9L+eHRKQ:qf7ZsmrOFF0OHN/SmM9rHRKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fef05ca4227986ade2e8affecb17aa1_JaffaCakes118

Files

3fef05ca4227986ade2e8affecb17aa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c9d4a7ff7f22a6d5a573ea11b9a6607

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

kernel32

RaiseException
GetCalendarInfoW
HeapDestroy
IsValidCodePage
InitializeCriticalSection
HeapCreate
GetACP
LeaveCriticalSection
SetEndOfFile
SetFilePointer
EnterCriticalSection
EnumResourceNamesA
RtlUnwind
GetStartupInfoA
FreeEnvironmentStringsA
VirtualFree
HeapSize
GetOEMCP
DeleteCriticalSection
HeapReAlloc
GetCPInfo
ExitProcess
ReadFile

ole32

CoGetMalloc
CoInitializeSecurity
CoUninitialize
CoQueryProxyBlanket
CoTaskMemFree
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
StringFromGUID2

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ