29044b2028ee72b2c0cbd333da1ea460_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29044b2028ee72b2c0cbd333da1ea460_JaffaCakes118
Size

287KB
MD5

29044b2028ee72b2c0cbd333da1ea460
SHA1

ccb8e64d671bd4d3e4a94389bfa35a52e77158f6
SHA256

cef902ea5f6d6e7094429e10980943ea66ce622d386a0b28e15be582c4d9cfdf
SHA512

630e9ed9f0813ec78eb87751836b68ea34a057dac66d43eab0b574cef7704d5aea755ada13a56b314f4b1b94ca9e454e1f5fdd2c87a7b352ecd4ab10f4373f94
SSDEEP

6144:ONzUo9IWTze6lj2viPSQe2UO3lP2e1SNBJB928w6zdRyLx9sUkXtNNrOFUhGeqAf:ON4YIW/e6Qi64UO3lP2e+/VzdRyLxZS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29044b2028ee72b2c0cbd333da1ea460_JaffaCakes118

Files

29044b2028ee72b2c0cbd333da1ea460_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d33d4c2aa29dc8106c124f1432479d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

crtdll

memset

user32

wsprintfA

gdi32

StretchBlt

winmm

timeGetTime

oleaut32

OleLoadPicture

ole32

CoTaskMemFree

comctl32

InitCommonControls

shell32

SHGetSpecialFolderLocation

Sections

.text
Size: 280KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE