68d5d6fc5be99bcb2296688d03b7dd0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68d5d6fc5be99bcb2296688d03b7dd0a_JaffaCakes118
Size

347KB
MD5

68d5d6fc5be99bcb2296688d03b7dd0a
SHA1

bf7d217e6273d1c48883efa214d667fe945a7396
SHA256

edaac506c6e40afd5bcf55d6cf4ba19c6836561056d27301881aa8fea3d1f53d
SHA512

dad1142f9db3c63e0b736f839ee85148f897e4c2cce32ae4b256f85e185b4617c430d61fd84a2685f987bb92cb3479dc6170c3ed2e76796088b8df4c64e645fc
SSDEEP

6144:a8iWerxf3j32gaYlr3PmldhJTMClnGhL4zGKtbm7OZZWfvuUX7Z25p1zbR9:a8hediFY53+hBMonIpKgKZZWfvuUX7ZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d5d6fc5be99bcb2296688d03b7dd0a_JaffaCakes118

Files

68d5d6fc5be99bcb2296688d03b7dd0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43511726a646b6591866d6d31ba77042

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FreeLibrary
GetProcAddress
EnumDateFormatsExA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree

oleaut32

VARIANT_UserFree
GetErrorInfo
VarUI1FromUI4
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE