f85a69eb1e7069208389ab6da9c06865_JaffaCakes118 | Triage

Sharing

General

Target

f85a69eb1e7069208389ab6da9c06865_JaffaCakes118
Size

165KB
MD5

f85a69eb1e7069208389ab6da9c06865
SHA1

cbaa4a1d3cc96c034c42281bc671d90bf8533c41
SHA256

266cb4041236f6dd70a4709321690030ab63ff84aebe41ea8b4b6acd7503c18d
SHA512

1ca18d54de4cfce342eab678578de027ee5f8d0fb9a651f7ed777f8d3b9c54c21173b8bf5708ff76d65f2317062584ffb9d561c2d79aba6955a9da9ac783d318
SSDEEP

3072:L7veQjYvOs+/P0cdFVTWNdSdDcbu/Rr/pnAvWBb6Ud6:utvOd/PZVTWWdRjVAvWkUd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f85a69eb1e7069208389ab6da9c06865_JaffaCakes118

Files

f85a69eb1e7069208389ab6da9c06865_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1249675ff56848698ffdceccac6f87e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
CoSetProxyBlanket
CoTaskMemFree
CoQueryProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoUninitialize
StringFromGUID2

rpcrt4

UuidCreate

kernel32

DeleteCriticalSection
GetCalendarInfoW
RtlUnwind
HeapSize
RaiseException
GetStartupInfoA
GetACP
HeapReAlloc
HeapCreate
ExitProcess
VirtualFree
SetEndOfFile
EnumResourceNamesA
EnterCriticalSection
GetCPInfo
HeapDestroy
InitializeCriticalSection
FreeEnvironmentStringsA
GetOEMCP
LeaveCriticalSection
SetFilePointer
IsValidCodePage
ReadFile

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ