34d2b17048e3d02b229a62eb8086fc0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d2b17048e3d02b229a62eb8086fc0f_JaffaCakes118
Size

73KB
MD5

34d2b17048e3d02b229a62eb8086fc0f
SHA1

d57f209210aee8874e6d734c8514f2769c02e35f
SHA256

aa37b893912704c76f655a3024d4cfac22501b9dcfb56dd5de3012ee5f50f379
SHA512

5832e12d8f18b16ac1b61c29a940d3a57d77f8ad2beda845ac3e98df9a97d6e90999178e5e391baf142db861b1bb0235df44a06e766847612b98784677bdf0d6
SSDEEP

768:9o8BCE2PDcahRoI1+bMmNhZUu0FJV/kYFikndorXkBTUvw00MY8eaTx9yobb7qmf:u8BCTD7yb5NghkYFi6AwueaFcdmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d2b17048e3d02b229a62eb8086fc0f_JaffaCakes118

Files

34d2b17048e3d02b229a62eb8086fc0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4644a3a6a6a9203e9f7a5d6738317176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
VirtualFree
ExitProcess
UnmapViewOfFile
lstrlenA
GetLastError
GetModuleHandleA
CloseHandle
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

avifil32

AVIStreamCreate

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ