JaffaCakes118_3d17a1db3d763035bc53ae1608e5fe31 | Triage

Sharing

General

Target

JaffaCakes118_3d17a1db3d763035bc53ae1608e5fe31
Size

176KB
MD5

3d17a1db3d763035bc53ae1608e5fe31
SHA1

85ece5cb2d18fcd4fec2ef8c38fa2e427cbd4915
SHA256

0c09ba37119df1297b51e28d9ff75c41646017d7f0c770890528662bda14bb5a
SHA512

bf697e87142b58ca59c87032f8b122e4c38cc8117cc23d511ee03d1754cd226c17e81d47c39e43729e73cf6d820c3282ff6cac01737b538a4fd1dc5a18fca5e5
SSDEEP

3072:B9hYq6dQLFHft2/EOHSkfOjWD9AfZ2hj6+QNxuAPfHb:B9hYqUQpHF2/pykoWZPA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3d17a1db3d763035bc53ae1608e5fe31

Files

JaffaCakes118_3d17a1db3d763035bc53ae1608e5fe31
.exe windows:4 windows x86 arch:x86

17583b982f9a55f3c52c309a4a2a0b3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
GetStdHandle
FindResourceExA
GetCalendarInfoA
SystemTimeToFileTime
GetModuleHandleA
HeapAlloc
SizeofResource
LockResource
LoadLibraryExW
lstrcpynW
GetVersionExA
EnumResourceNamesA
FindResourceA
LoadResource
LeaveCriticalSection
GetSystemTime
FindFirstFileW
CreateFileW
LoadLibraryW
WriteFile
HeapFree
CloseHandle
GetProcessHeap
TerminateProcess

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ