b194ee985b654eadc5de74b081ebd21a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b194ee985b654eadc5de74b081ebd21a_JaffaCakes118
Size

351KB
MD5

b194ee985b654eadc5de74b081ebd21a
SHA1

7284c1431587fddd0db80c53874f8e2fd8b214b6
SHA256

a8cbf452e5c9c8cd7ae745bb00e911cbf959c9d3ffe9a781e5529d73e6e0b5e1
SHA512

279d1c59d50b783fee097a4b7daa6b21557e84cd6bdaffea6ae4db79b8332263614b4bb5621667666e9578004e6dd4fa6cfc3fd47824fe2c4f73dd9ae81f026e
SSDEEP

6144:qn+JTbQL8rizC3vAu3bxJQv2rB8mIvQihh5Vuf2Ea0ql37dUKUXF65tMxO2eMkgH:qn+B+8OzMAuLaYCNzhh5S2ZldPUXaaO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b194ee985b654eadc5de74b081ebd21a_JaffaCakes118

Files

b194ee985b654eadc5de74b081ebd21a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

377a42fc35dcb420fac59865d26da451

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
RemoveDirectoryW
SetEnvironmentVariableW
EnumCalendarInfoW
DisableThreadLibraryCalls
DebugBreak
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenEventW
CreateSemaphoreW
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
CreateDirectoryW
CreateTimerQueueTimer
ChangeTimerQueueTimer
DuplicateHandle

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 221KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE