523dd5ac6b5131ed140e8f41b9bed551_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

523dd5ac6b5131ed140e8f41b9bed551_JaffaCakes118
Size

163KB
MD5

523dd5ac6b5131ed140e8f41b9bed551
SHA1

bd683bcf97b1d7c2f62fb5afeb4e6586f6299bed
SHA256

d7fdee01e4c5e46331b85336fed4c1a851ca62fe3ec7c86d34da73fb1b7885a7
SHA512

f0c5d64bae836b4f2d37a0f3f56b80c30110594ac94a9e12d62d0b94280a8f6969235748322137a310932dd4537bff921dcb443eb9590a11244e5c597d13214f
SSDEEP

3072:ZsMBW5Wol4KV8EZgQMr6IdCk+i2f56N8s8+xbE:ZsMB+4KV8+gDrhW56N8s8+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
523dd5ac6b5131ed140e8f41b9bed551_JaffaCakes118

Files

523dd5ac6b5131ed140e8f41b9bed551_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17057ceb89a9fdee8524eb21c1d58963

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

rpcrt4

UuidCreate

ole32

CoGetMalloc
CoInitializeEx
CoQueryProxyBlanket
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoTaskMemFree
StringFromGUID2

kernel32

HeapSize
SetFilePointer
GetCalendarInfoW
InitializeCriticalSection
GetCPInfo
ExitProcess
GetACP
HeapReAlloc
HeapCreate
IsValidCodePage
RaiseException
DeleteCriticalSection
RtlUnwind
EnumResourceNamesA
FreeEnvironmentStringsA
VirtualFree
GetOEMCP
LeaveCriticalSection
HeapDestroy
GetStartupInfoA
SetEndOfFile
EnterCriticalSection
ReadFile

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ