0f55e826be21ad82baf5e2458c6aad65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f55e826be21ad82baf5e2458c6aad65_JaffaCakes118
Size

239KB
MD5

0f55e826be21ad82baf5e2458c6aad65
SHA1

dafe1a050efd575501e072c73c0e7c1c2ef6a499
SHA256

c4f44fee2d4a215975ed734535d02b725e7796441e2ed60df3756e31d6dbce42
SHA512

fec5bf789c5e118a1f9f9607cf2bab49a917b635d0161bbafdf3222d5212ae9fd124bc753a77a57b3cbe4c1afcc62046c04b0d08fd610266449a24337d95f165
SSDEEP

6144:zYzdNumZStCQ4C44197PstQ/6Iaik20ef:cZJyCQ4b4j0P60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f55e826be21ad82baf5e2458c6aad65_JaffaCakes118

Files

0f55e826be21ad82baf5e2458c6aad65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

098674db4f9e496f3ef4bce8c1821d02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
lstrcmpW
MulDiv
GetCompressedFileSizeA
SetLastError
WaitForSingleObject
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
LocalAlloc
GetLocaleInfoW
GetComputerNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
OpenProcess

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 144KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE