de4ee254d3edfbf8b4d5f015e8d1031a_JaffaCakes118 | Triage

Sharing

General

Target

de4ee254d3edfbf8b4d5f015e8d1031a_JaffaCakes118
Size

347KB
MD5

de4ee254d3edfbf8b4d5f015e8d1031a
SHA1

308597cded59d2779a858b1d43d73c06ca8eff9c
SHA256

1c1d562c055d9987344c77bd33747e89073bcf5877023209516364b41528c4ad
SHA512

73547e19d1e4349a7eecac84696ad1ed65eaa5c889e83e2189d219302ff5e96e632f4a6276f292d8fb2973c4802254977a4cc2f8f9cae6395dcca2b4c5ef13d8
SSDEEP

6144:eM4XLY+YbkK2vglG3Q9XEvhHf2I9fNyTNHU2vyFbJZ3IiWedZzFcJUGVpGxs:aXX6kxFQ9UvhH591yTXvKbJZ49edZxcz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4ee254d3edfbf8b4d5f015e8d1031a_JaffaCakes118

Files

de4ee254d3edfbf8b4d5f015e8d1031a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fce67081bb4c464c1e4676b63bc118df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoW
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 219KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE