e1cd7334725e1848e2a421703572b5de_JaffaCakes118 | Triage

Sharing

General

Target

e1cd7334725e1848e2a421703572b5de_JaffaCakes118
Size

242KB
MD5

e1cd7334725e1848e2a421703572b5de
SHA1

ee5565e8511dd50fd9fd6ab7ea80a8a0c4fb1053
SHA256

8195dd38f4a9b510fe2c53fc4643a42d456ee59325c576350206273daaabdaee
SHA512

86af7425c6da4ba73976b7163dcd428e93cafe173e25c338a616c51fa5feedbadc6e6f83610fe6e83bd99240834fc443ef7e7a1adc0fee9d0ade6aacdbb43734
SSDEEP

3072:8Oe1+Z8MBpkbfsblBxIQRDMIdm7exvUrgJ+nW/PZV/KeL99ZL3aHgHbqRKT/JkTb:W1AnzblBp7jovwPPJ9MHiMe/JkGwLRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1cd7334725e1848e2a421703572b5de_JaffaCakes118

Files

e1cd7334725e1848e2a421703572b5de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf10fdbdbcd4534eb67e983779ae8872

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreateEx

shlwapi

wnsprintfA

kernel32

GetLongPathNameA
GetExitCodeThread
LeaveCriticalSection
FindFirstChangeNotificationA
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA

oleaut32

CreateErrorInfo
GetRecordInfoFromTypeInfo
VarI2FromDec
VariantInit
SysFreeString

Sections

.text
Size: 116KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ