1038c85f36d55e5ab54c774c6ef2379a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1038c85f36d55e5ab54c774c6ef2379a_JaffaCakes118
Size

157KB
MD5

1038c85f36d55e5ab54c774c6ef2379a
SHA1

96e4955be3c9a6fbe07a5d149b47cb9765625d62
SHA256

9395edadbb004b42b3ae0da19e1a7155f34e7feb93cd7f051e7ae565497e10d5
SHA512

c7ef6568a199d605f46410ae10b1ba5525125f8948023729517fb4c71f67a2c163c1ccdba7c6d1374de3c7825762e78a9bda95a24a2ddd918be857f6242349c0
SSDEEP

3072:e2Y22r5Ml9X8dvEW2w5t3nKJsprZhuo01EDWHZ54TdS7/l7SS7StqXNdmz/:MVril9X8dvt2C3Br01lHb4RSLpreKM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1038c85f36d55e5ab54c774c6ef2379a_JaffaCakes118

Files

1038c85f36d55e5ab54c774c6ef2379a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7de0635e4d5edfffbd3b294450099f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
CheckRemoteDebuggerPresent
GetCPInfo
GetLastError
GetACP
WideCharToMultiByte
EnumResourceTypesA
lstrcmpiW
MultiByteToWideChar
GetTickCount
GlobalFree
FindClose
InitializeCriticalSection
LockResource
lstrcpyA
lstrlenW
lstrcpyW
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

wsprintfW
CharUpperW
TranslateMessage
PostThreadMessageW
GetDC
CharNextW
SendMessageW
SetTimer
GetMessageW
DispatchMessageW
KillTimer
UnregisterClassA

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ