2e6769a54067991123e1aca135e13911_JaffaCakes118 | Triage

Sharing

General

Target

2e6769a54067991123e1aca135e13911_JaffaCakes118
Size

118KB
MD5

2e6769a54067991123e1aca135e13911
SHA1

854da89ef417c25aebc51d5e13aa1b38f427c6c5
SHA256

b2acc820b6200db4e150470b9835bf1691acef9a9af08077a088d53896c2b67d
SHA512

9e9f5837966fc543189de8f819b355270ba502e12521228f4717b8679c36f7c338861542f837dec444365bbf4bf93e659b891b17d8cc8db701df44982ecd3e25
SSDEEP

3072:Gk52yghAJjH1fPDUSRf6MDEme+otMsfjtXuQ0:EygSJBPV6MDEmeFVfn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e6769a54067991123e1aca135e13911_JaffaCakes118

Files

2e6769a54067991123e1aca135e13911_JaffaCakes118
.exe windows:4 windows x86 arch:x86

264ccade4426fb999db6aef729ff8d39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

GetUserNameExW

kernel32

GetShortPathNameA
GetProcAddress
GetModuleHandleW
FindFirstChangeNotificationW
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenW
lstrcatW
lstrcpynW
lstrcmpiW
FreeLibrary
LoadLibraryW

oleaut32

OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI4FromDec
SysFreeString

Sections

.text
Size: 79KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ