967366d71b6ff1d93b2037badcaf4089_JaffaCakes118 | Triage

Sharing

General

Target

967366d71b6ff1d93b2037badcaf4089_JaffaCakes118
Size

175KB
MD5

967366d71b6ff1d93b2037badcaf4089
SHA1

abe06b4e27135b587f65c229aca2b602789cc1d3
SHA256

b8d2f66ed43792b1092cc1dbdc462159648740c92232c4cf4727facd9bdeaf7f
SHA512

536e3ba3f094b7b419a316f12370c7bfeae28ec3e402c4edd9e49dbcee63d2b3ac01243165930d542805c2556f9810bdcd311598ee46fd4b02d4ace491f3431c
SSDEEP

3072:Lu8MsX4PrUTpyw7vj89z74nEhg6/Hmhhe7hx3FjW3ydOT8kj:LuRu377nCpHmhEXjW3Jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
967366d71b6ff1d93b2037badcaf4089_JaffaCakes118

Files

967366d71b6ff1d93b2037badcaf4089_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2363b61767ee438747db5f3233074b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleSave
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

kernel32

LCMapStringW
LocalAlloc
GetCPInfoExA
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
InitializeCriticalSection
EnumResourceTypesA
LeaveCriticalSection
GetSystemInfo
EnterCriticalSection
LocalFree
GetLongPathNameW
GetLastError
GetModuleHandleA
DeleteCriticalSection
GetStringTypeA

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

GetDeviceCaps
GetTextExtentPointA
SelectObject
GetTextMetricsA
DeleteObject
CreateFontIndirectA

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ