a56d114999fafbc46dfc18c51c2bb29c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a56d114999fafbc46dfc18c51c2bb29c_JaffaCakes118
Size

217KB
MD5

a56d114999fafbc46dfc18c51c2bb29c
SHA1

897e4ed37d040c8cae6ab5f6ed0377c65eb3754a
SHA256

cb9ee587f7f380115da6fdbd8ce869eeab0ce93175c726629fb5997a993c2d12
SHA512

27f94db6ad59c23e4581ed274d5bd43a0ee69233c9b5a8db5aaa3ff8262c0d588fe2d5b681ac3d5f2d4f5dff5da50714c7422505ee0dea0fe0b32a3b036bc4c8
SSDEEP

6144:UFqvtyR3Ir2LOTi/TXz3m8brmAJoSXidrUIZeZudTyXhu:9yR3tLxTXz3hbrBXidNIulyXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a56d114999fafbc46dfc18c51c2bb29c_JaffaCakes118

Files

a56d114999fafbc46dfc18c51c2bb29c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

098674db4f9e496f3ef4bce8c1821d02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
lstrcmpW
MulDiv
GetCompressedFileSizeA
SetLastError
WaitForSingleObject
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
LocalAlloc
GetLocaleInfoW
GetComputerNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
OpenProcess

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 173KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE