6362ca5f2bc020ba8c80d7588529c63c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6362ca5f2bc020ba8c80d7588529c63c_JaffaCakes118
Size

350KB
MD5

6362ca5f2bc020ba8c80d7588529c63c
SHA1

9ff09d999dba9a11901c46b42a113cd323437df4
SHA256

362da5c086d77c867b88b8adf9caffba0028c96ef1c538d46395e5578dea1001
SHA512

c5c3dd3decb455557aed0bbb5019e062bf103cf205bd20b6fcf68e403b497558ff3f503c3f97d9ab592eb62f8718780691494583e338e76cb1819bb8981bd7be
SSDEEP

6144:X0kzCFqBsHKK2Vlk9MgIpDfcKw+7WX+EgNuqE+iZQC5Cu9ysvY/rwBTN/8Wt72AI:Xaylk9MDpr5w+7WOEgNfE+ieutpwTwTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6362ca5f2bc020ba8c80d7588529c63c_JaffaCakes118

Files

6362ca5f2bc020ba8c80d7588529c63c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3103d0e0d01f81ce34ae977817677c0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SetErrorMode
CreateMailslotW
EnumCalendarInfoW
FreeLibrary
LoadLibraryA
IsBadCodePtr
UnhandledExceptionFilter
GetEnvironmentStrings
GlobalFlags
GetWindowsDirectoryA
VirtualQuery
SetHandleCount
LCMapStringA
GetModuleHandleA
GetTickCount
InterlockedExchange
LocalFree
InterlockedDecrement
LocalAlloc
GetThreadPriority
GetCurrentThreadId
LockResource
GetVersion
CloseHandle

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

userenv

RegisterGPNotification
UnregisterGPNotification

Sections

.text
Size: 220KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE