69c365250050a43bedf7ea045a8021a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69c365250050a43bedf7ea045a8021a7_JaffaCakes118
Size

193KB
MD5

69c365250050a43bedf7ea045a8021a7
SHA1

622edff20d3427d1328f06321a1b4a6965b35e67
SHA256

d4e6764a25a121c373b5198a058f14dad09596c0a1886555c512d52b9144f2ef
SHA512

04100b72ed43566f26096a8503df942f11bfb7b3b629535d62ccb1a565e1cfa21c9d919e593d9354f063f7780a0c7bb949b171c805483b1c7b9189dd443e35aa
SSDEEP

3072:9V2wdAHQcgrrmfY5aB3AHFCK/BgoMgbaqQjZbLoR5W8QbRbYaV:9VxAHQcYCHB35K/SoXaqQVmWVbRbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69c365250050a43bedf7ea045a8021a7_JaffaCakes118

Files

69c365250050a43bedf7ea045a8021a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6054035aea3eb3440e343ed03d88802a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage

ole32

OleTranslateAccelerator
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

winmm

timeGetTime
timeSetEvent

kernel32

LocalFree
SetFirmwareEnvironmentVariableA
GetModuleHandleA
GetProcAddress
LCMapStringA
LCMapStringW
DeleteCriticalSection
GetLastError
SetStdHandle
EnumResourceTypesA
LoadLibraryA
GetShortPathNameA
InitializeCriticalSection
LeaveCriticalSection
GetSystemInfo
EnterCriticalSection
LocalAlloc
GetStringTypeA

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ