JaffaCakes118_1b21178c2bfba9d0f395dd5f1b97295b | Triage

Sharing

General

Target

JaffaCakes118_1b21178c2bfba9d0f395dd5f1b97295b
Size

181KB
MD5

1b21178c2bfba9d0f395dd5f1b97295b
SHA1

06a1539a431de65838f2e1b319244f8a578b90e8
SHA256

13acb4e62294b06f8c273e0c3bb9728fde6069e4e6b5e0e709ba68673bccbedb
SHA512

7ee145e9b8b5a978eb22ba76b1ee1cde2b80ad8ab5f120732dea474732a7c914e1433e17ccbdbe1330d01db7e07d42ff1aa9e41a77cb9898eb9713666f0c21a0
SSDEEP

3072:/RoXYWYwC2Dkur+gvyjV0mff9SpAEYaUFucx2vQcCMHML26HK0Qn4aYjL1axNQ8D:wY5YkurPmVbnqqaU4vQcCMsenBYfer5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1b21178c2bfba9d0f395dd5f1b97295b

Files

JaffaCakes118_1b21178c2bfba9d0f395dd5f1b97295b
.exe windows:4 windows x86 arch:x86

47a3bbbbd896d56effcf099fc299b168

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

kernel32

LoadResource
LockResource
GetCalendarInfoA
SizeofResource
GetModuleHandleW
FindNextFileA
SetLastError
_lwrite
FindFirstFileW
LocalFree
RaiseException
EnumResourceNamesA
GetProcessHeap
_lread
_llseek
HeapAlloc
FormatMessageW
FindFirstFileA
FindFirstFileW
GetCommandLineW
Sleep
MultiByteToWideChar
HeapFree
GetCurrentDirectoryW
GlobalFree
_lclose

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ