JaffaCakes118_3eb41cb0e6e8eb696897e0c385a57979 | Triage

Sharing

General

Target

JaffaCakes118_3eb41cb0e6e8eb696897e0c385a57979
Size

276KB
MD5

3eb41cb0e6e8eb696897e0c385a57979
SHA1

3353da22eeea2165d9beab057853ef5631742280
SHA256

31ae7eaeef5c1305edbdf5e275593908952caa9331cd34f18cbf77fba293fc62
SHA512

177b65f339b149e9bd73a4da2d6426869ef31d01a01dc6d4edef7ed2e76fab4e2dc202e48a332a7a5c48cb5a8d10ff99fc65dd3da113fca0544fc9e65769b421
SSDEEP

6144:PJC+0xqsdRkBL2XbyNOiVxWckLGyuc7b4ycChLn:Pb0xqsdKobyNZVeec7b4o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3eb41cb0e6e8eb696897e0c385a57979

Files

JaffaCakes118_3eb41cb0e6e8eb696897e0c385a57979
.exe windows:4 windows x86 arch:x86

73768b22b84c187b07008e1e98d9c94a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GlobalFree
BaseFlushAppcompatCache
FormatMessageA
MultiByteToWideChar
LoadLibraryExW
GetCurrentThread
GetLastError
lstrlenA
GetTickCount
EnumResourceTypesW
CreateMailslotW
SetUnhandledExceptionFilter
IsDebuggerPresent
MulDiv
GlobalUnlock
RaiseException
LoadLibraryA
GetSystemDirectoryW
UnhandledExceptionFilter

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

gdi32

GetStockObject

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ