eea249bcdd0d2acf69655bc5adb1fc13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eea249bcdd0d2acf69655bc5adb1fc13_JaffaCakes118
Size

173KB
MD5

eea249bcdd0d2acf69655bc5adb1fc13
SHA1

bb81179acc434a470b10c8d7e19765c60176f66c
SHA256

bb592e71f9723732693985f74eaf4c3b3afc289e2c623087cdd6791108659a4f
SHA512

182678e55715172bd22f08d245fafa53f202a40203bf220c9d0ee54feaa9b4a6f131193e124131900cfd97ce4c8dfa94efe8a6ede727737dd1421054bd33cf19
SSDEEP

3072:NeMmkP7JvG7877LfMedWxqDtIbGqqT/MJZkjadWmZn3pjuj8AjHS75rpxB:5dGjuWTGqqT/IXd5R5ju4AI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea249bcdd0d2acf69655bc5adb1fc13_JaffaCakes118

Files

eea249bcdd0d2acf69655bc5adb1fc13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61c3642fe55da434fafe9966cb8daf6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

kernel32

GetCalendarInfoW
HeapFree
LoadLibraryExW
CloseHandle
GetThreadLocale
SystemTimeToFileTime
GetLocaleInfoA
HeapReAlloc
LoadLibraryW
WriteFile
EnumResourceNamesA
CreateFileW
GetProcessHeap
FindFirstFileW
GetSystemTime
HeapSize
HeapDestroy
HeapAlloc
GetStdHandle
lstrcpynW

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ