23c4447e53f228a95345e9003b7369a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23c4447e53f228a95345e9003b7369a0_JaffaCakes118
Size

355KB
MD5

23c4447e53f228a95345e9003b7369a0
SHA1

4e48318c3f5725c9c26f6e6ef88e466e6638b37a
SHA256

757802b1e1ccf7100e4d818c7f2c5a635f14856c3807b7be7ecdb9548f6ab9c7
SHA512

b6be45e258f7713f72c2db7dc764cfbdd41349a6b550fc2d323645c300731f0fa234ad025e4860686f292bc42d7ce4bf6a65b15c1b3ddc06a869caccede58ef4
SSDEEP

6144:/Ro4c+AnxuURnEbremqbTbKq2Was0OVM9s84O4EZZqZzvlcK:S+AkURkwbTbj5a9J9dV4Uq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c4447e53f228a95345e9003b7369a0_JaffaCakes118

Files

23c4447e53f228a95345e9003b7369a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37af3ec161d07a3f42e74e8d7b911eb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
LoadResource
GetLocaleInfoA
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatNumber
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 243KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE