d1f565bfffe554c71d504095eedb97e1_JaffaCakes118 | Triage

Sharing

General

Target

d1f565bfffe554c71d504095eedb97e1_JaffaCakes118
Size

171KB
MD5

d1f565bfffe554c71d504095eedb97e1
SHA1

f8039b9ea6dfedcb70bee66d2d92600ad33959a0
SHA256

4e0e37d4e4f3ee09c2235828c0000b552ee44db68b602a22c33d2a449c1eed10
SHA512

2c51714decfa6721e85a3ff5f43d102275f1f8471b98701dd2da2dd4e9189af925f6a1bcbd82f465d459cc5e27e78c5291eccc1472983bd3e6f25339c0cac552
SSDEEP

3072:i1SLBSMwluZnm/rXg/4vcwwwSZBzXLXHvFCUo6rkte37+Nu5jAJuT:6SLInZrX1cnwSv7XPUUoZAL+N6jA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1f565bfffe554c71d504095eedb97e1_JaffaCakes118

Files

d1f565bfffe554c71d504095eedb97e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddb21b324f58f59a3bdf54db87cd9358

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoQueryProxyBlanket
StringFromGUID2

kernel32

RtlUnwind
GetCalendarInfoW
GetOEMCP
HeapCreate
InitializeCriticalSection
GetCPInfo
SetEndOfFile
EnterCriticalSection
HeapDestroy
SetFilePointer
EnumResourceNamesA
DeleteCriticalSection
ReadFile
LeaveCriticalSection
HeapSize
RaiseException
FreeEnvironmentStringsA
VirtualAlloc
GetStartupInfoA
GetACP
HeapReAlloc
IsValidCodePage
ExitProcess
VirtualFree
SetEnvironmentVariableA

rpcrt4

UuidCreate

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ