532f46d04a2ceabe3d72cfb2e220a8a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

532f46d04a2ceabe3d72cfb2e220a8a1_JaffaCakes118
Size

177KB
MD5

532f46d04a2ceabe3d72cfb2e220a8a1
SHA1

c08fa48901659b4e9cc5803cdc34e3d6dae2e9f6
SHA256

9c9de00f02313aee45ab4b07abedc441b656a0818bdd5df9866dd993cd5c3a6d
SHA512

f59de8b5ab55286de6f9345a71bb33176cf937ce293ec1824d8d6ebfd8fd0d2cb5717c8c0e841f1d00bf84a6d75bed0841aba18c9a25f490b4a61ce03a284791
SSDEEP

3072:2+IdMSw9FNCKn1GAaeICTNGNxERr0CXH2ZPotck9UIs44OZhV:2nMX9FNP15NxTNrR5+Q2k5snOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532f46d04a2ceabe3d72cfb2e220a8a1_JaffaCakes118

Files

532f46d04a2ceabe3d72cfb2e220a8a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e3df019e6886579b7e33771a22130a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetCalendarInfoW
GetVersionExA
HeapDestroy
SizeofResource
GetStdHandle
LoadLibraryExW
FindResourceA
LoadLibraryW
HeapAlloc
GetProcessHeap
CreateFileW
EnumResourceNamesA
LoadResource
FindResourceExA
SystemTimeToFileTime
FindFirstFileW
LockResource
GetSystemTime
CloseHandle
HeapFree
LeaveCriticalSection
lstrcpynW
WriteFile
GetModuleHandleA
TerminateProcess

shlwapi

PathFileExistsW
PathFileExistsA
StrStrIW

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ