fd063ba242a42e0f5f70fc48ece11711_JaffaCakes118 | Triage

Sharing

General

Target

fd063ba242a42e0f5f70fc48ece11711_JaffaCakes118
Size

347KB
MD5

fd063ba242a42e0f5f70fc48ece11711
SHA1

344e524ce58625cee15c9cc82ec95ec0ee23fcc7
SHA256

45b6cc0c2e3dc6845ff341d96a2bd4d838cacf4fd2b0387e3b4a196b59f44e46
SHA512

05aee7c8d792a2247fb36d297d914941d4c19df2cf1a3496a0f1de5deb6c23895087e728f84751062972efd012f0e35e606d2ed04331dbd10e4de27ea6988905
SSDEEP

6144:DjunetgRAZMiW6cltq63XsN9jOMH64MeOJsb+KrOWzVPqc/V45XP:XeewUcltq63Xe9P5HOJsbX7V4B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd063ba242a42e0f5f70fc48ece11711_JaffaCakes118

Files

fd063ba242a42e0f5f70fc48ece11711_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89f13a0e6730a09c1211cf08c33877cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoA
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 216KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE