46ab0e6b18f04f1878bc21c9ba7ae302_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46ab0e6b18f04f1878bc21c9ba7ae302_JaffaCakes118
Size

236KB
MD5

46ab0e6b18f04f1878bc21c9ba7ae302
SHA1

c8eeab70935b4245696d6380bed07d9554c5eeaa
SHA256

2d01330766db21ef65d378b9da5a416bc20c77275cb76985ffe3269b2dcefb25
SHA512

e70afd8534ca8ffbc2b290c5930e07913cbd5e4d2595e766255c5d0b8fd9e23818d9cf1cfa99c4e98f739dc16f5068ff69637b27f3c3ff96632aefdbaf10a8d3
SSDEEP

6144:7HRYTjOZt8zrkH76LYNyHyMhVKRzbl875i+JMN45PHP:LS+28O0cHyMsp+zMoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ab0e6b18f04f1878bc21c9ba7ae302_JaffaCakes118

Files

46ab0e6b18f04f1878bc21c9ba7ae302_JaffaCakes118
.exe windows:4 windows x86 arch:x86

816ad99b02642348d316c58fcdbf28f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIBuildFilter

kernel32

GetLongPathNameA
GetProcAddress
GetModuleHandleW
FindFirstChangeNotificationA
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenW
lstrcatW
lstrcpynW
lstrcmpiW
FreeLibrary
LoadLibraryW

oleaut32

OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI2FromDec
SysFreeString

Sections

.text
Size: 112KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ