050f56f3c64353bcf8ebc4f51eb4f80d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

050f56f3c64353bcf8ebc4f51eb4f80d_JaffaCakes118
Size

350KB
MD5

050f56f3c64353bcf8ebc4f51eb4f80d
SHA1

9700418cddea3c97ccfd6aff13ab06cfaf4d69ce
SHA256

155c4805159e53ea4159aa0516f94b2b95533b38207ad3f5223b597c3b4e3d8e
SHA512

1f7f9f2c5c03f76060f91ca2e0f8bee2663aa19b927f38fed0ec63cf04b6851ae16c4a89025d335b5387754d48a2ad640f171f7c1147934f95fe4a7590432c8e
SSDEEP

6144:PD1Q0ANzyMkY/1PuOfCEsTr+aH9zpruYtN8EITGazmDjwMWNPT5NaAcWG3:hNSVnCxJZ1uC8EWGazMYT5NaAW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
050f56f3c64353bcf8ebc4f51eb4f80d_JaffaCakes118

Files

050f56f3c64353bcf8ebc4f51eb4f80d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8eba6ed0b291c729b591f29c8735ca1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoW
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 217KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE