JaffaCakes118_08dc9ce40262450a71dc495bd3fb7d60 | Triage

Sharing

General

Target

JaffaCakes118_08dc9ce40262450a71dc495bd3fb7d60
Size

173KB
MD5

08dc9ce40262450a71dc495bd3fb7d60
SHA1

8572170e5a3be6288b9b2d0c5a7c6cef604aa2a6
SHA256

4ef3f844e0d6ff1b38b9f601ef0d93c6ce6fa945602d3fd7354206f50ed59d30
SHA512

62e372fb2798b5d63ceacda34e64c6c0b78155c6201c1a19ae24a318c8cbcdd12a98716f828e779421ac857fc48b749788cea6f8aa1ae24dddc00e05372b9711
SSDEEP

3072:tYc3AyXNWdNo+YFLs1Ilg1EGfvCjxKyeW2kRPz+0XqjQdf5cKDFoc43Jh+S9vc1R:Sc3AeNWdNo+N1l1EXdPBXqUdB5FoJqSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_08dc9ce40262450a71dc495bd3fb7d60

Files

JaffaCakes118_08dc9ce40262450a71dc495bd3fb7d60
.exe windows:4 windows x86 arch:x86

7bbe349dd27324c7b5448f9a7616166b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

kernel32

GetCalendarInfoW
GetStdHandle
HeapAlloc
LeaveCriticalSection
LoadResource
GetSystemTime
GetProcessHeap
HeapDestroy
SystemTimeToFileTime
GetVersionExA
LoadLibraryExW
HeapFree
EnumResourceNamesA
GetModuleHandleA
FindFirstFileW
lstrcpynW
FindResourceExA
WriteFile
SizeofResource
CloseHandle
FindResourceA
CreateFileW
LockResource
LoadLibraryW
TerminateProcess

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ