e293081bc3876ff98a15bbca3370e26d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e293081bc3876ff98a15bbca3370e26d_JaffaCakes118
Size

184KB
MD5

e293081bc3876ff98a15bbca3370e26d
SHA1

afb32e1a146a62f0de941a3c9bdbb917e0ec2b93
SHA256

5ad2c626dc57616cc8a9523ae47cb9010dd989a8b9d5dde13731e81aee954055
SHA512

e9af7beab168a7d2d85a944bc33529483624419d4625f882c9f77c913024f4a1f7fc44646a7a86a2eee2e432204ab792821556540e666ef804da0f97bc84cdb5
SSDEEP

3072:WzjS2qukaithyRs4IruHgZ8uwO3qIlmTtXf7KqqMIi2jTOm3m859rmAJoSXidrU7:UFqvtyR3Ir2LOui/TXz3m8brmAJoSXiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e293081bc3876ff98a15bbca3370e26d_JaffaCakes118

Files

e293081bc3876ff98a15bbca3370e26d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

098674db4f9e496f3ef4bce8c1821d02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
lstrcmpW
MulDiv
GetCompressedFileSizeA
SetLastError
WaitForSingleObject
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
LocalAlloc
GetLocaleInfoW
GetComputerNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
OpenProcess

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 173KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE