be89dab47d2d5c5da678957e935683b1_JaffaCakes118 | Triage

Sharing

General

Target

be89dab47d2d5c5da678957e935683b1_JaffaCakes118
Size

182KB
MD5

be89dab47d2d5c5da678957e935683b1
SHA1

7797617a861de1c7a1881ed25b1d4e8ce0bf6e21
SHA256

6ae9d2a3795c048fe91d3a85749a94b6c483006d841201998155a213bbed3e99
SHA512

27ea7e5b953c14c46e25a07fd09fe04b5399e6a40ffa461a968dc661958bc33c137521f06783cbac0d28f45ab85ef7c0c1f61af5881a0f45f1043788695b9414
SSDEEP

3072:U+A3w0NSJk5wD+hveJT7Mp2MDw9pI9R37IKIm7fgV5udVQ:b2wZJnChvC8p2MDwPICm7YV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be89dab47d2d5c5da678957e935683b1_JaffaCakes118

Files

be89dab47d2d5c5da678957e935683b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9324f7e4a5bf7c7919b491121e7ffa19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetCalendarInfoW
DeleteCriticalSection
HeapReAlloc
IsValidCodePage
VirtualFree
EnterCriticalSection
GetCPInfo
ReadFile
HeapSize
VirtualAlloc
SetFilePointer
EnumResourceNamesA
InitializeCriticalSection
SetEndOfFile
FreeEnvironmentStringsA
LeaveCriticalSection
GetACP
RtlUnwind
GetOEMCP
RaiseException
GetStartupInfoA
HeapDestroy
ExitProcess
SetEnvironmentVariableA

rpcrt4

UuidCreate

ole32

CoGetMalloc
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
CoQueryProxyBlanket
StringFromGUID2

user32

DestroyWindow
CreateWindowExW
EnumChildWindows
SendMessageA
IsWindow
GetDlgItem
GetWindowThreadProcessId

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ