49430556598255cd3a19830d30f38380_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49430556598255cd3a19830d30f38380_JaffaCakes118
Size

264KB
MD5

49430556598255cd3a19830d30f38380
SHA1

b624ac161678bcc92d4c8d57ef46fa064efd1107
SHA256

7648fa9ca18bea5fc718e549ce7637ae4487444d8e8905d0b635148039f559c7
SHA512

1d3b157b1331516f04abab28bdbb5564ebc8b9e6c89d8c5ae0568ae5c2e726f3769ba795e4baa16f52063f35bae489f49cd4bd858f58e869ccd4215a183ee348
SSDEEP

6144:PSkPYr6aaJlR9m68riU/dwlPoFREHrlf5q:Prw/GtmbriUgxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49430556598255cd3a19830d30f38380_JaffaCakes118

Files

49430556598255cd3a19830d30f38380_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83aa14ce871ac7612164141d3b06cdf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
AttachConsole
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
CreateTypeLib
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 190KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ