8ab0e7270c19414c25004e9e39b927d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ab0e7270c19414c25004e9e39b927d6_JaffaCakes118
Size

233KB
MD5

8ab0e7270c19414c25004e9e39b927d6
SHA1

7ee1b90158ec0bb9b22549a922efc65f4ef90fb6
SHA256

f99773c0cb62575f1a99e94a8b14986de700242068486659ad4faf3b534db26d
SHA512

b80aa5e428ebc4bcc0e99338e489e4be636217e02606d9aac90182b116ec1292178a497b9500538b6d5d2776e9ebd6caedaec5e54f6439f70f3a90a74f2dc21e
SSDEEP

6144:zYzdNumZ2tCQ4C44197PstQ/6Iaik20efQ:cZJeCQ4b4j0P60N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ab0e7270c19414c25004e9e39b927d6_JaffaCakes118

Files

8ab0e7270c19414c25004e9e39b927d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

098674db4f9e496f3ef4bce8c1821d02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
lstrcmpW
MulDiv
GetCompressedFileSizeA
SetLastError
WaitForSingleObject
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
LocalAlloc
GetLocaleInfoW
GetComputerNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
OpenProcess

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 144KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE