112dae9191d291b9f7158373aabab3ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

112dae9191d291b9f7158373aabab3ba_JaffaCakes118
Size

163KB
MD5

112dae9191d291b9f7158373aabab3ba
SHA1

09b19fe7a1fcd2c6a6267bfb8b3980747a4bcd9f
SHA256

a28614fe359f01cf216484873b672f5c8ee02ba4f00c0e78a40728ecabd74cc8
SHA512

075ebbc1e80af2cb69386664c56d51692af9f604ffa7ce9a7779354291e333192215b977d5389c7214afe274cfbd0b06b654017756340cc027e6c7d102ce63f3
SSDEEP

3072:tI0EExdAvQAdNefmZrt1QQuhKhL4PgOkrhAw7PsMy5Y:zYzdNumZrtCQ4C44197Psw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112dae9191d291b9f7158373aabab3ba_JaffaCakes118

Files

112dae9191d291b9f7158373aabab3ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

098674db4f9e496f3ef4bce8c1821d02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
lstrcmpW
MulDiv
GetCompressedFileSizeA
SetLastError
WaitForSingleObject
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
LocalAlloc
GetLocaleInfoW
GetComputerNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
OpenProcess

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 144KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE