JaffaCakes118_0776ff2bbabde899c82cfcebfdd5823c | Triage

Sharing

General

Target

JaffaCakes118_0776ff2bbabde899c82cfcebfdd5823c
Size

275KB
MD5

0776ff2bbabde899c82cfcebfdd5823c
SHA1

98a7c44b1ecf19029e2a9250e09cdec53b75577b
SHA256

00723b15c6476a81851e14af4806c99075d153f4b315e6bb06bdd6267448b738
SHA512

920ace20e82c7653b911870a9b529f4908ab0b2229e33ab205913a1d143f80788193b195b0c0a3ec23c663666711b7b8f0b15f7457de8a414d177438a3e63213
SSDEEP

6144:MPRrvDiFDhXWwc7Q+Jsra1eBrMyrBSCxCWYg3AR:ERrGLXtubJsu1yHrkC0C3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0776ff2bbabde899c82cfcebfdd5823c

Files

JaffaCakes118_0776ff2bbabde899c82cfcebfdd5823c
.exe windows:4 windows x86 arch:x86

0180c0bbfb05093150bad35c3682268a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
LCMapStringW
GetStringTypeA
VirtualAlloc
GetOEMCP
GetACP
GetCurrentProcess
LCMapStringA
WriteFile
EnumResourceTypesW
SetUnhandledExceptionFilter
InterlockedExchange
FindFirstVolumeMountPointA
RtlUnwind
GetStringTypeW
LoadLibraryA
GetCPInfo
IsDebuggerPresent
GetLocaleInfoA

msimg32

TransparentBlt

oleacc

GetOleaccVersionInfo
AccessibleObjectFromEvent

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ