9518408136fd1813904953e0f8149aea_JaffaCakes118 | Triage

Sharing

General

Target

9518408136fd1813904953e0f8149aea_JaffaCakes118
Size

163KB
MD5

9518408136fd1813904953e0f8149aea
SHA1

441fa6e913678e7b20fc0cd0e254aec90db758f6
SHA256

bea012d79dc80d6316c2434ca935e2c74c508abc6d1ccc66c9a2cd3c0a8e4cef
SHA512

06935dc029867674a7b5d595e1d81362eb72d61882b243d90c0238b3ec154b599ae6ffeec7b84cfd8a28deb195d7ab5bbca3eed53868815e57fbac4ec08d95e4
SSDEEP

3072:6kChIFvQrNax4gjA8W8+iTJk8mHUcmUUf0L0a+8CPPAt:6kO4jxXvtMmUUcMzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9518408136fd1813904953e0f8149aea_JaffaCakes118

Files

9518408136fd1813904953e0f8149aea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

500a55ee96e740ff219e2d00e8294dac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
HeapDestroy
GetCalendarInfoW
GetProcessHeap
HeapReAlloc
SystemTimeToFileTime
WriteFile
GetThreadLocale
LoadLibraryW
EnumResourceNamesA
LoadLibraryExW
GetLocaleInfoA
HeapSize
FindFirstFileW
HeapAlloc
HeapFree
CreateFileW
GetStdHandle
GetSystemTime
lstrcpynW

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ