JaffaCakes118_d3a5249b1871bb735cc105987cd8e458 | Triage

Sharing

General

Target

JaffaCakes118_d3a5249b1871bb735cc105987cd8e458
Size

183KB
MD5

d3a5249b1871bb735cc105987cd8e458
SHA1

9e2ecf59cf7b0cf25c2df4dbf290c3c1a84521c2
SHA256

a45ddb4804881d076913b60b44a47d418b905dfcceac8a6951747fe3802e7da3
SHA512

4846b44ecb2c0af342a2177c2142247df2d4f8af478fc37c15f5f02adf8c1847bc67241dcf290c09ff28660ce0b20abd89f7f294de00f9e14f108caf42a3d934
SSDEEP

3072:VRUicGA0U0vg2yh7n2t0oTqaQKx2kU54Fyaw0b7vkJciwxNvrJHKmDVe3:RcGngxV+qzK4ke/O9D9DDVe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d3a5249b1871bb735cc105987cd8e458

Files

JaffaCakes118_d3a5249b1871bb735cc105987cd8e458
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f40685f467a260289dfcce482210c221

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

GetACP
InitializeCriticalSection
GetCalendarInfoW
HeapReAlloc
DeleteCriticalSection
HeapCreate
RtlUnwind
IsValidCodePage
VirtualFree
HeapDestroy
RaiseException
GetStartupInfoA
LeaveCriticalSection
EnumResourceNamesA
FreeEnvironmentStringsA
GetOEMCP
ExitProcess
SetEndOfFile
EnterCriticalSection
GetCPInfo
HeapSize
SetFilePointer
ReadFile

ole32

CoGetMalloc
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoQueryProxyBlanket
CoCreateInstance
CoTaskMemFree
CoSetProxyBlanket
StringFromGUID2

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ