73cdf2dae18bd2db5a71b0adfa54f464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73cdf2dae18bd2db5a71b0adfa54f464_JaffaCakes118
Size

347KB
MD5

73cdf2dae18bd2db5a71b0adfa54f464
SHA1

b720a945ecd72acdaba53c0c7920dca86dc622f1
SHA256

699564f7f9b5ab97eb2f45fa9e31d2b244474e9a4dad4466cf8e2c504f488149
SHA512

40bdc32c0797dc85583102362454fea6a9cc40f6c99f64e38fbbcec5199c9e7d01a8543b508e4aa23fea029a735135bc7d45454ff8aa7f1700450a2108cba8c0
SSDEEP

6144:a8iWerxf3j32taYlr3PmldhJTMClnGhL4zGKtbm7OZZWfvuUX7Z25p1zbR9:a8hedi0Y53+hBMonIpKgKZZWfvuUX7ZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73cdf2dae18bd2db5a71b0adfa54f464_JaffaCakes118

Files

73cdf2dae18bd2db5a71b0adfa54f464_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43511726a646b6591866d6d31ba77042

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FreeLibrary
GetProcAddress
EnumDateFormatsExA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree

oleaut32

VARIANT_UserFree
GetErrorInfo
VarUI1FromUI4
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE