4bec6879bcdd26eecc84098024214edd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bec6879bcdd26eecc84098024214edd_JaffaCakes118
Size

351KB
MD5

4bec6879bcdd26eecc84098024214edd
SHA1

78263ad84edffaef329c46067162a30687aa6c38
SHA256

bc25222dd8d80a7d835a2e959f7141c4340a3d894cb87e42bae8338cf6e35f8c
SHA512

ca4e213cbdd62beab94c09136015218680f9e0a475a16d3d26a9693b851232b657b3bf315fa5c960f4ca9c3df67323569fff84996a942fa2538acdb5ec810adc
SSDEEP

6144:ElQcaE9A6DBR9WiV9ysCyJigshjwyPMrsopVAdaOVtFHMv3:YQcNA69RMccf5IK1Vt5Mv3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bec6879bcdd26eecc84098024214edd_JaffaCakes118

Files

4bec6879bcdd26eecc84098024214edd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

377a42fc35dcb420fac59865d26da451

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
RemoveDirectoryW
SetEnvironmentVariableW
EnumCalendarInfoW
DisableThreadLibraryCalls
DebugBreak
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenEventW
CreateSemaphoreW
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
CreateDirectoryW
CreateTimerQueueTimer
ChangeTimerQueueTimer
DuplicateHandle

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 218KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE