JaffaCakes118_90e49675e9eb0d3d0af176e3aa6a85c6 | Triage

Sharing

General

Target

JaffaCakes118_90e49675e9eb0d3d0af176e3aa6a85c6
Size

168KB
MD5

90e49675e9eb0d3d0af176e3aa6a85c6
SHA1

d75e624ab4301b5b0a2b993ae834e18ba06e317a
SHA256

4fcad03902e6b1b9cf79ad94c6780611a635983003ae85600c3909439a6a05f3
SHA512

a9060ce37a43749710f4cef2b49981fe05e08b5c21eaf3762ddbea73565ef1ca6d96d5273e8beb3994f04643285ba1b265329279402d7b6df9cbcb90c46a2831
SSDEEP

3072:1AIGitAdeif0HeJESbLnocTNB3qjwEvVm+DL67KAIau3UBjL60z0i:mIGG2f0HwEiLDTv3qE8HiKAXu3Kjt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_90e49675e9eb0d3d0af176e3aa6a85c6

Files

JaffaCakes118_90e49675e9eb0d3d0af176e3aa6a85c6
.exe windows:4 windows x86 arch:x86

77c65354fcce2abc9e404f5d8fdd2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

FindResourceA
LoadResource
GetCalendarInfoW
HeapAlloc
WriteFile
GetProcessHeap
LoadLibraryExW
SystemTimeToFileTime
GetSystemTime
LoadLibraryW
HeapFree
CloseHandle
EnumResourceNamesA
HeapDestroy
GetVersionExA
LockResource
FindFirstFileW
lstrcpynW
GetStdHandle
FindResourceExA
CreateFileW
GetModuleHandleA
SizeofResource
LeaveCriticalSection
TerminateProcess

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ