59f51a6c348adcf831951ebdb2dfd7db_JaffaCakes118 | Triage

Sharing

General

Target

59f51a6c348adcf831951ebdb2dfd7db_JaffaCakes118
Size

243KB
MD5

59f51a6c348adcf831951ebdb2dfd7db
SHA1

7b82f1fc193392e1d7a97209f1a6cc25678385c7
SHA256

7566fe668c9cf9b0a92f81279528d141fc7aa4acb3e38c61f3ba4519e88f6981
SHA512

3460e69bbf3ff4fe4357719d15e05e2e6037729e731fe7a26de48bfa931f918f56a35adb78c8d84fc9476b42e86959f1283c36981e23edf087bf6e5f59a044cf
SSDEEP

6144:lofAndVrvYwQjRrwuo85fZp+6i4ME1DMmJQu5H4EzDnLVQ:mY7lQjJaCx06TM6MmySHHzDL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59f51a6c348adcf831951ebdb2dfd7db_JaffaCakes118

Files

59f51a6c348adcf831951ebdb2dfd7db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62a1a1df88b7883c4d0fd2be4a8b7706

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIBuildFilter

kernel32

GetLongPathNameA
GetProcAddress
GetModuleHandleA
FindFirstChangeNotificationA
MultiByteToWideChar
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenA
lstrcatA
lstrcpynA
lstrcmpiA
FreeLibrary
LoadLibraryA

oleaut32

CreateErrorInfo
GetRecordInfoFromTypeInfo
VarI2FromDec
VariantInit
SysFreeString

Sections

.text
Size: 116KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ