1c99feb7645918e387d86d4f5f65a106_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c99feb7645918e387d86d4f5f65a106_JaffaCakes118
Size

242KB
MD5

1c99feb7645918e387d86d4f5f65a106
SHA1

2a02bca2137bbdab12060f65db15cf72b7895977
SHA256

48b96b3aef96036a0b9e4df5d739a4f557fedc03e3bebdb366563553fae1753b
SHA512

516225bba304e6fb44fbc7d1c642d4ba6007002397b19ff56635aa910e673584b35a6aab01d996bb5cdc3d7438f53c906a0c9ec3e0f32907b350bc25161c9704
SSDEEP

3072:BFZIcjE+5nE2uboCqFOGO0GA1E0rXHIofvp2vjwze+xsTiN+sD1uhwbTnHGx2D4H:BFZIA25eOFAdrNfx2vj0d1GwXmxsYSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c99feb7645918e387d86d4f5f65a106_JaffaCakes118

Files

1c99feb7645918e387d86d4f5f65a106_JaffaCakes118
.exe windows:4 windows x86 arch:x86

746f680188dbd58b68dadfa6bfa97862

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW

kernel32

LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
LZCopy
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer

oleaut32

DispInvoke
OleLoadPicture
VarUdateFromDate
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen

shlwapi

PathFindExtensionA

Sections

.text
Size: 117KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ