JaffaCakes118_1c8f3ac2263bb7f996ee7685ed3d84e4 | Triage

Sharing

General

Target

JaffaCakes118_1c8f3ac2263bb7f996ee7685ed3d84e4
Size

166KB
MD5

1c8f3ac2263bb7f996ee7685ed3d84e4
SHA1

bbe0e7a306b021674dde855ae3abb18ecf7c421d
SHA256

4e62c11c9b8197de0d44869bb9710576341fe37301e931c4b8da665961652c4f
SHA512

97c4d4876b068c404ef0b8f4bc1d55fe3523f25805c16fb075bd42faa834a85cc867a033d0dd6cd6bdc0ea742ed38c7b1ec6d88a32279d11747cf471e3f2ba0f
SSDEEP

3072:vufEwW90LLrjzeNaDaW1S2XyabQNPxPHtHTk8cRB:2sF0eJW1rNbuFA8oB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1c8f3ac2263bb7f996ee7685ed3d84e4

Files

JaffaCakes118_1c8f3ac2263bb7f996ee7685ed3d84e4
.exe windows:4 windows x86 arch:x86

2b5ecebbdbe9a76f441a2b4166d1b731

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoCreateInstance
CoInitializeSecurity
CoQueryProxyBlanket
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoSetProxyBlanket
StringFromGUID2

rpcrt4

UuidCreate

kernel32

SetEndOfFile
HeapSize
DeleteCriticalSection
GetCalendarInfoW
IsValidCodePage
ReadFile
ExitProcess
VirtualAlloc
GetACP
GetStartupInfoA
GetCPInfo
EnumResourceNamesA
SetFilePointer
HeapReAlloc
FreeEnvironmentStringsA
RaiseException
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
RtlUnwind
VirtualFree
GetOEMCP
HeapCreate
InitializeCriticalSection
SetEnvironmentVariableA

user32

CreateWindowExW
DestroyWindow
SendMessageA
IsWindow
GetDlgItem
EnumChildWindows
GetWindowThreadProcessId

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ