18f1b063acb66f60b8c3a68e32bb8532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18f1b063acb66f60b8c3a68e32bb8532_JaffaCakes118
Size

338KB
MD5

18f1b063acb66f60b8c3a68e32bb8532
SHA1

8269813ad69518516274021d1dd2c64a59ca08de
SHA256

c9fdda883362636fb670cda1a9b6ac80ed0d6e0009830467fb34265affd44c01
SHA512

b6669ece60c1c5f3ff34100a738b74f3ef005b4c53391b58f53178628c0001575ab8b194b15f0b569601acde35513aa721a7f119c0179cfd2db349b9a6c1acda
SSDEEP

6144:uAAWggGcZFjbcKGRPnOmFYv+1FjvQjwyILvNPl+NyCC4uaOwBvsLdCR:/xFbRGRxYGPjvQ8yILFPl+NKwBG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f1b063acb66f60b8c3a68e32bb8532_JaffaCakes118

Files

18f1b063acb66f60b8c3a68e32bb8532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ff7cbfa2b7a718de523270c2a78d01b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SizeofResource
LockResource
EnumCalendarInfoW
LoadResource
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 216KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE