95d1099b0877ca905daa4cfd5c248214_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95d1099b0877ca905daa4cfd5c248214_JaffaCakes118
Size

239KB
MD5

95d1099b0877ca905daa4cfd5c248214
SHA1

ff200e68659783e2527eee491c8bba9cab3243be
SHA256

3b16d338b96d653d2aded2a32e73e8b3e56515b7d03a028d9df9e9a46c3a6e2b
SHA512

d6bd750290653963853f8960878cf23af7bbd7bf6b2937e960f55a7ae73e18d5c708ffe53d62f7c10a6e597d1dc1018c9aa9c7a7012050698cbb33b576d6b833
SSDEEP

6144:TIc0rj0P7JUQTZrgv87kdiY3iyxsJEdk:l0eJUjjJ392m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95d1099b0877ca905daa4cfd5c248214_JaffaCakes118

Files

95d1099b0877ca905daa4cfd5c248214_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5aee606ede77bb26b66cd4297664994

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
SetLastError
FreeLibrary
GetCompressedFileSizeW
TerminateThread
GetACP
GetLocaleInfoW
GetThreadLocale
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetDriveTypeW
CreateEventW
QueryDosDeviceW
OutputDebugStringW
SearchPathW
GetWindowsDirectoryW
SetUnhandledExceptionFilter
CreateFileA
ReleaseMutex
GetCurrentThreadId
CreateThread
FlushInstructionCache
WaitForSingleObject
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
VirtualAlloc
VirtualFree

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
OleCreateFontIndirect
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 135KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE