d35a7352e12a25e36b718b07d2a74d9c_JaffaCakes118 | Triage

Sharing

General

Target

d35a7352e12a25e36b718b07d2a74d9c_JaffaCakes118
Size

174KB
MD5

d35a7352e12a25e36b718b07d2a74d9c
SHA1

0ea1212e27715dfa2adaac3679622fc8f00a8769
SHA256

8bd403adc225ef5512a309e52822b37c6dfad2905c327da490ab409fd4aea738
SHA512

717768020a4e09868324483ea9bf71b4a68cd87384a2ac4cbf09edabe61c563d7d6dda299c2963eedd75dd6fa39462880fb4b335a91c0aca0b3b25edfea46308
SSDEEP

3072:j3QTXjUhMXiYETuL6Iqp8n3Jgrz7dz8QeZII:sY65dqrVoQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d35a7352e12a25e36b718b07d2a74d9c_JaffaCakes118

Files

d35a7352e12a25e36b718b07d2a74d9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74ad4e6b67e4065db762da134abdcf83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoQueryProxyBlanket
CoSetProxyBlanket
CoInitializeSecurity
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromGUID2

rpcrt4

UuidCreate

kernel32

SetFilePointer
DeleteCriticalSection
ReadFile
GetCalendarInfoW
HeapSize
GetCPInfo
GetACP
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualAlloc
InitializeCriticalSection
EnumResourceNamesA
VirtualFree
FreeEnvironmentStringsA
SetEndOfFile
IsValidCodePage
RtlUnwind
GetOEMCP
RaiseException
HeapReAlloc
GetStartupInfoA
ExitProcess
LeaveCriticalSection
SetEnvironmentVariableA

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ