fdba53642074b63e0c159064ae2264af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdba53642074b63e0c159064ae2264af_JaffaCakes118
Size

344KB
MD5

fdba53642074b63e0c159064ae2264af
SHA1

19888ff8512c62c4882daf8bb6e33ef7a6cb6a57
SHA256

47ccb3ffc2fdb4fdf786b795f78648aa2a220ce7a9d356695e491c456b04f927
SHA512

71835eea60b3fa8f9c4c2695425becc52179af0d54330a299648f17ac2bcd7c52ee8a8283e058ba3c6f960772ce371cee6b6977a15d36c5695adc13b225d92e6
SSDEEP

6144:a8iWerxf3j32uaYlr3PmldhJTMClnGhL4zGKtbm7OZZWfvuUX7Z25p1zbR9r:a8hedifY53+hBMonIpKgKZZWfvuUX7ZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdba53642074b63e0c159064ae2264af_JaffaCakes118

Files

fdba53642074b63e0c159064ae2264af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43511726a646b6591866d6d31ba77042

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FreeLibrary
GetProcAddress
EnumDateFormatsExA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree

oleaut32

VARIANT_UserFree
GetErrorInfo
VarUI1FromUI4
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE