32f1124cd14ea9d46721078368f90e66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32f1124cd14ea9d46721078368f90e66_JaffaCakes118
Size

237KB
MD5

32f1124cd14ea9d46721078368f90e66
SHA1

cd556f38453d39957d9ebcd82fa00e0186992988
SHA256

8b58d803f9421c62b4287ac6bfea609b183be295f52adfc748be182a5681a284
SHA512

86f3cd3c3e410dc5d0984fe6d1f81df8a073c622de8e5eec21175e10041218980c6d0fd65a90944807be9ae95aacfe26d75c557159453519e73b089371cffbad
SSDEEP

6144:7HRYTjOZt8zrkH76LYNyHyMhVKRzbl875i+JMN45PHL:LS+28O0cHyMsp+zMoD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32f1124cd14ea9d46721078368f90e66_JaffaCakes118

Files

32f1124cd14ea9d46721078368f90e66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

816ad99b02642348d316c58fcdbf28f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIBuildFilter

kernel32

GetLongPathNameA
GetProcAddress
GetModuleHandleW
FindFirstChangeNotificationA
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenW
lstrcatW
lstrcpynW
lstrcmpiW
FreeLibrary
LoadLibraryW

oleaut32

OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI2FromDec
SysFreeString

Sections

.text
Size: 112KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ