429aaba854439dac142ece5e4a2b20b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

429aaba854439dac142ece5e4a2b20b7_JaffaCakes118
Size

171KB
MD5

429aaba854439dac142ece5e4a2b20b7
SHA1

4972c3dbe28e089e78696a8a7f593154b9343d54
SHA256

9f2c6c080b8a945427b13ee12fd856b07a1cc54f7b2dde8e4f44b7ea6be84596
SHA512

7827a977d4f92892b293c1157eaf0e63a88b0317239e9e4f7dce86540caf1f27f4e47f3d7fa3057bd47dcb0fb7d8d2ea5a5f8c887580d169329d9f5a08e86f31
SSDEEP

3072:lECZb8aGNhdyEw14N2TzXYPf7nwgExY05voO2CmyzwRXI8nU6:F8aGhdyEw1ZTzXyrwgEx9Zo59yzwRXI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429aaba854439dac142ece5e4a2b20b7_JaffaCakes118

Files

429aaba854439dac142ece5e4a2b20b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cffffcbfc5d47561e542316017df941

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
SetFilePointer
InitializeCriticalSection
GetCalendarInfoW
HeapDestroy
ExitProcess
GetStartupInfoA
SetEndOfFile
GetOEMCP
LeaveCriticalSection
HeapReAlloc
VirtualFree
EnumResourceNamesA
EnterCriticalSection
FreeEnvironmentStringsA
GetACP
DeleteCriticalSection
HeapCreate
HeapSize
IsValidCodePage
RaiseException
GetCPInfo
ReadFile

oleacc

LresultFromObject
CreateStdAccessibleObject

rpcrt4

UuidCreate

ole32

CoGetMalloc
CoSetProxyBlanket
CoUninitialize
CoInitializeEx
CoCreateInstance
CoInitializeSecurity
CoQueryProxyBlanket
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ