JaffaCakes118_c0904ab24a5a0e48dfb08d76ca712de5 | Triage

Sharing

General

Target

JaffaCakes118_c0904ab24a5a0e48dfb08d76ca712de5
Size

176KB
MD5

c0904ab24a5a0e48dfb08d76ca712de5
SHA1

468ad4f177dc3c32df32bb3def9b9fc66235a044
SHA256

4e2aa7d3a94acef5e2a6736b6e3e184cbec99697b751041bea9a1e57c1747939
SHA512

5c6bf0fc5480af65fc6b5e2e67b537538596d396122e8602cc925298d14452f3a385101276baf6a2c02aaf78a83c2bc04eec0d82c3d2a377cbdb8e0293721bfc
SSDEEP

3072:aQkKoPSA0Ywm1dS/x8Qkp8uHy0ZhcCMN6g0Ziw7hiKivDqVsdXHxJWRl7xFTkAiV:aQkKo6/Y5dS/xzkhy+c10Zl7O2VsdXRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_c0904ab24a5a0e48dfb08d76ca712de5

Files

JaffaCakes118_c0904ab24a5a0e48dfb08d76ca712de5
.exe windows:4 windows x86 arch:x86

93464817fe48c3ede42c8197f74c6aea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GetCalendarInfoA
HeapAlloc
GetCurrentDirectoryW
GetProcessHeap
FindFirstFileA
GetCommandLineW
MultiByteToWideChar
LoadResource
SizeofResource
FindFirstFileW
FindNextFileA
HeapFree
EnumResourceNamesA
_lread
SetLastError
_llseek
FindFirstFileW
GlobalFree
_lwrite
GetModuleHandleW
LocalFree
RaiseException
LockResource
Sleep
_lclose

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ