1a4869eb023e0b064c577a9f28cea752_JaffaCakes118 | Triage

Sharing

General

Target

1a4869eb023e0b064c577a9f28cea752_JaffaCakes118
Size

347KB
MD5

1a4869eb023e0b064c577a9f28cea752
SHA1

649c8a013245a7250246baa06f6e9d97b9ab82c4
SHA256

4b2757bc24efbc96759846f5e89059b56ef36aa846583f8583fd41a4b4ead137
SHA512

c4b59e6811f8de8c3ebb008145d472495e9507e6734e9d9d93ae347b15cc98c1973975f7799452e883a65758ea52ceea5811aaff6d5512cdbcf6531fadb91313
SSDEEP

6144:DjunetgRAZMiW6cltqg3XsN9jOMH64MeOJsb+KrOWzVPqc/V45XP:XeewUcltqg3Xe9P5HOJsbX7V4B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a4869eb023e0b064c577a9f28cea752_JaffaCakes118

Files

1a4869eb023e0b064c577a9f28cea752_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89f13a0e6730a09c1211cf08c33877cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoA
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 216KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE