JaffaCakes118_e2565a0f5f7ae250a66e32179fb71616 | Triage

Sharing

General

Target

JaffaCakes118_e2565a0f5f7ae250a66e32179fb71616
Size

164KB
MD5

e2565a0f5f7ae250a66e32179fb71616
SHA1

65e9bd06d73be64510c66ad505e4fc24caba928e
SHA256

1119e84f9273724575801886c1d9789315dd247b6fe26463e278abceb9d367c3
SHA512

5801364d6520c9db9455bb597235dce56d2908c8333ec4547ea1c3fbe7baeefa834bae011ea9026332a10038149988658381406171e4bd86d8a9d3b99dad0d09
SSDEEP

3072:mHmjLLQw1t930Mj7dkgl2j5jd5R/myyZpDyTEeij2TguH1giWgOCbNpM:hLntt0MHdkglS5jPtaOEeij2TgwnW2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e2565a0f5f7ae250a66e32179fb71616

Files

JaffaCakes118_e2565a0f5f7ae250a66e32179fb71616
.exe windows:4 windows x86 arch:x86

f1f4a5717ceb0d877e0bb9d930b6b360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleW
GetCPInfoExA
_lread
LocalFree
FindFirstFileA
_llseek
SizeofResource
RaiseException
GetCommandLineW
_lwrite
GetCurrentDirectoryW
EnumResourceNamesA
SetLastError
LockResource
HeapAlloc
FindFirstFileW
MultiByteToWideChar
FindFirstFileW
FindNextFileA
GlobalFree
HeapFree
LoadResource
FormatMessageW
Sleep
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ