c249e58ae8f5b012972b8fef1cfe837f_JaffaCakes118 | Triage

Sharing

General

Target

c249e58ae8f5b012972b8fef1cfe837f_JaffaCakes118
Size

349KB
MD5

c249e58ae8f5b012972b8fef1cfe837f
SHA1

774ca90269abd766cc4e751c699025763e27b4c8
SHA256

ceb7cdb17a6abc0d10198996d8ecabddafebcbb152f5e0177cc0c2c2cf8ec12e
SHA512

80f1ba2f064eb1d0d08688ae427f2b3b882a1aa1a73aec1a664eede7a74e3e1d25abab4fa100d84bf962c915337deaa050f070c14bfd848877d23f16374d6614
SSDEEP

6144:oOavk2p1sc2oNQlelbm2AKnkB1/GB2FuO1D0Z4LGyvBcG4+hZCPCny2rWt+e2DH+:otk2pKhoWel5JkB1m2Fu1Z4L34+hZCPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c249e58ae8f5b012972b8fef1cfe837f_JaffaCakes118

Files

c249e58ae8f5b012972b8fef1cfe837f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3103d0e0d01f81ce34ae977817677c0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SetErrorMode
CreateMailslotW
EnumCalendarInfoW
FreeLibrary
LoadLibraryA
IsBadCodePtr
UnhandledExceptionFilter
GetEnvironmentStrings
GlobalFlags
GetWindowsDirectoryA
VirtualQuery
SetHandleCount
LCMapStringA
GetModuleHandleA
GetTickCount
InterlockedExchange
LocalFree
InterlockedDecrement
LocalAlloc
GetThreadPriority
GetCurrentThreadId
LockResource
GetVersion
CloseHandle

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

userenv

RegisterGPNotification
UnregisterGPNotification

Sections

.text
Size: 215KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE