fecaaf76466c6c481dc4510c41b37caa_JaffaCakes118 | Triage

Sharing

General

Target

fecaaf76466c6c481dc4510c41b37caa_JaffaCakes118
Size

246KB
MD5

fecaaf76466c6c481dc4510c41b37caa
SHA1

ed76573e6c533448709166b8978d34979456c2ac
SHA256

97c7d17e68b8ff3a3d63f40362d96fa776240f9fc1f590a4f67ac2e5b1c7816f
SHA512

2d834c8870ecbf1f3f78536e5c6cc143a3bcd2ad82c31d3fc5ae5593aea227d8b8046c8aa78563e2ede306d1d77a32921c0ee72c2374023fa1ad4e3d68d26206
SSDEEP

6144:qqjgsaxwH+Z0H0wJCk0vYuPk1y8jL3X9BAskEv3ilPe:1ZaGHhC5wfDjxOs73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fecaaf76466c6c481dc4510c41b37caa_JaffaCakes118

Files

fecaaf76466c6c481dc4510c41b37caa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69643cb208b4d7983089033331126925

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW

kernel32

LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetFileAttributesA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer

oleaut32

DispInvoke
OleLoadPicture
VarUdateFromDate
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen

shlwapi

PathFindExtensionA

Sections

.text
Size: 139KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ