346c08652e194e964142b18704b7fb13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

346c08652e194e964142b18704b7fb13_JaffaCakes118
Size

398KB
MD5

346c08652e194e964142b18704b7fb13
SHA1

8b4207dd0626e90ad45eb4856c53643f4e322c4e
SHA256

e2fa5796cd06e7e061c118764ad48bc316193659ffa35ffde73b5dace06c3afc
SHA512

1cd743d66c755ae73382eda66aa53f0b7927359ec6d70b059bc17454505431dcb73f8a57dbed252599ccf0927e67ecf2b77518c9172cc0420bf96a8a6b8e80a0
SSDEEP

6144:nPPrO426Ep+NQFj8YdCioiqBb1lo/GWyJusttUnVzfCN/WQ3EEs8P7Bnsz+d:Hr5FSfdZTUREGFpt0fw/WQ3EEs8Dmzw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
346c08652e194e964142b18704b7fb13_JaffaCakes118

Files

346c08652e194e964142b18704b7fb13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8ba47a23d75efe23bcab7d23280a7f70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

gdiplus

GdipImageGetFrameDimensionsList

user32

DefWindowProcW

gdi32

BitBlt

ole32

OleLoadFromStream

oleaut32

VarBstrFromDate

comctl32

ImageList_Add

rpcrt4

UuidCreateSequential

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 352KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE