JaffaCakes118_b86b1af0c43dd25430b2e55a9d04e792 | Triage

Sharing

General

Target

JaffaCakes118_b86b1af0c43dd25430b2e55a9d04e792
Size

181KB
MD5

b86b1af0c43dd25430b2e55a9d04e792
SHA1

ddf330615b9b6398f468b463b0c4dcde573ee5ad
SHA256

109808d529a2609c56c95de0316c3bf407d71458856059e687ba2b37c45d50bd
SHA512

e2a033ea72095041335e9d705646a94f33d6f2975b20781abb594a5db366e2c27fd5cc2e9417de68b3b659b388d75d6dbf4d9689541c6fe2de5456de1e230eef
SSDEEP

3072:NMq8g2qgBPBOk0ulYM1agUHqwbhG4hEDD38Xumy94V590m6fXEM1EBs0UFZy/jE:Njz2qQOc1agUKwbhADD37l9uRBs0IEr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b86b1af0c43dd25430b2e55a9d04e792

Files

JaffaCakes118_b86b1af0c43dd25430b2e55a9d04e792
.exe windows:4 windows x86 arch:x86

834d53c1c8f765ab36b59bf441c4a1f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
QueryPerformanceCounter
VirtualAlloc
GetSystemInfo
ExitProcess
HeapAlloc
HeapValidate
EnumResourceTypesA
VirtualProtect
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
FindFirstFileExA
RaiseException
RtlUnwind
HeapFree

oleacc

GetOleaccVersionInfo
CreateStdAccessibleObject

gdi32

GetStockObject

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ