4bd13e8bcd557f493aae4a6111c9d774_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bd13e8bcd557f493aae4a6111c9d774_JaffaCakes118
Size

142KB
MD5

4bd13e8bcd557f493aae4a6111c9d774
SHA1

bab9d4938fe7c3504e0056e5b9b1e7d70ed65416
SHA256

09e004a332226bfae66632684c853548a954d0acb8f21ee81835e1472ba8d345
SHA512

7afd3a5a37967d654cb78e865ed21ea97a7ba589f45d8eb0bff14afd1bc74e3569c4af94c3249816ce02d1eb234672dffb6b38a9b4f22a65b9161f042f581b89
SSDEEP

3072:Gk52yghAJjH1fPDUSRf6MDEme+otMsfjtXuQ2O/pcI/:EygSJBPV6MDEmeFVfn2O/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bd13e8bcd557f493aae4a6111c9d774_JaffaCakes118

Files

4bd13e8bcd557f493aae4a6111c9d774_JaffaCakes118
.exe windows:4 windows x86 arch:x86

264ccade4426fb999db6aef729ff8d39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

GetUserNameExW

kernel32

GetShortPathNameA
GetProcAddress
GetModuleHandleW
FindFirstChangeNotificationW
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenW
lstrcatW
lstrcpynW
lstrcmpiW
FreeLibrary
LoadLibraryW

oleaut32

OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI4FromDec
SysFreeString

Sections

.text
Size: 79KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ