261c9bb78010b192b8a3484e0a1c7743_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

261c9bb78010b192b8a3484e0a1c7743_JaffaCakes118
Size

349KB
MD5

261c9bb78010b192b8a3484e0a1c7743
SHA1

1cae50e589dca0628e431c232376f49421e15e5d
SHA256

ad9183c70890caf3aa7728af7e1190b694df7ef559f48abacf3d7325b1192590
SHA512

6d9508fb243eda6fc4b4366af2e08e6c513a4d1065b7dc75aacb07a3f6df480e0745fa64d7e6d8000d8520a6c46c1a97cb97904aa57f79f06e1dcf631ed3a1ff
SSDEEP

6144:uq8X6lklNN0iD1zgZN1r7peZ+beoL8mOplSIfk2VUDcfl0vPdeuVFYv5kP:uq8X8klN++1zgpr7YZhE1wsKk6UDcf6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
261c9bb78010b192b8a3484e0a1c7743_JaffaCakes118

Files

261c9bb78010b192b8a3484e0a1c7743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d430d65d37d3b6bd92b8a5ae439186b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FreeLibrary
GetProcAddress
EnumCalendarInfoExA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree

oleaut32

SafeArrayDestroyDescriptor
GetErrorInfo
VarUI1FromUI4
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 221KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE