JaffaCakes118_94125550e66fc5b0746655e156de8fc8 | Triage

Sharing

General

Target

JaffaCakes118_94125550e66fc5b0746655e156de8fc8
Size

183KB
MD5

94125550e66fc5b0746655e156de8fc8
SHA1

005db71514ce62d35134c5cb1a8e5dc84d2a2792
SHA256

390b0c04cb687a8a7b2e12c8dc44eda212817e0c0f7dfcfa3c3da494811ee491
SHA512

94981ab5cc9d6e602c52ba1c683c24117e0496be956641ded7b5d9b114fcf6f8e229da9bc2e9421bda1ac82b81fc1a93f0942d53bea6fd9793e74d38f7beb4a6
SSDEEP

3072:2aKoQFqpMIs5ZB7ciCvxx2sre9Jqy83crBXLalBgPprfXCGv54pWow5LhNLQHN7I:eMMI3iCvxJKXNZP9fBEFYty7uULIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_94125550e66fc5b0746655e156de8fc8

Files

JaffaCakes118_94125550e66fc5b0746655e156de8fc8
.exe windows:4 windows x86 arch:x86

ee6e044710c533137a1adfa832a6ff36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StringFromIID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

VirtualQueryEx
WideCharToMultiByte
LocalAlloc
lstrlenA
EnumResourceNamesA
MultiByteToWideChar
GetSystemTimeAsFileTime
RaiseException
CreateProcessA
OpenMutexW
InterlockedExchange

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ