JaffaCakes118_59ef85b79a6382700ebdc1bbbf8f01c1 | Triage

Sharing

General

Target

JaffaCakes118_59ef85b79a6382700ebdc1bbbf8f01c1
Size

165KB
MD5

59ef85b79a6382700ebdc1bbbf8f01c1
SHA1

1eb32ce8991b1067930ed13d7d9a8ebdb4ecc357
SHA256

a2b0e82c6cc7f9c66f119f32b2fd402a68f0bfbdf34129709078fbae10cd14a2
SHA512

32fcf67d50ca1beb4eb49939dd3c623226448996e33fd02b691cd720b40593dc24ecb6d4c8195752db22c91420e0f8fa74736fe670f50aad2bb167599c413d9e
SSDEEP

3072:5FlKQvSVSSSR6m1iNm9Euf2Vw+B0sSUvsvcBqamZDOwaDJmC:xq7S2aEuiRsvcbr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_59ef85b79a6382700ebdc1bbbf8f01c1

Files

JaffaCakes118_59ef85b79a6382700ebdc1bbbf8f01c1
.exe windows:4 windows x86 arch:x86

fd01ed1fe17c8dbe15d2a4882820da9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
VirtualProtect
RaiseException
ExitProcess
RtlUnwind
QueryPerformanceCounter
HeapAlloc
IsBadReadPtr
SetUnhandledExceptionFilter
EnumResourceTypesW
VirtualQuery
GetProcessHeap
VirtualAlloc
FindFirstFileA
HeapValidate
GetSystemInfo
HeapFree

gdi32

GetStockObject

oleacc

AccessibleChildren
CreateStdAccessibleProxyW

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ