161cfbd3300c108466c287e16b57dc53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

161cfbd3300c108466c287e16b57dc53_JaffaCakes118
Size

168KB
MD5

161cfbd3300c108466c287e16b57dc53
SHA1

da924df116e75d079b6f6bf85b21b8e70fdbaa92
SHA256

c888690cbf1887aa82b311dc26021d1ed9a9b377e7a05d278fcf27ac03f0e5cf
SHA512

05bca837e360c702cb93a261bad8452123351658ac0eea6ec506156a942ee82e370f7e4724f94431eea27781e8e9131bb5b0a5bf76e2b5e6c99b1999ef91a493
SSDEEP

3072:ZlmZPoLm/8eMCDivRH4tER6bZF2KZRIP/aNfbGE:ZmPf/8eM2SYtE6bSKZKaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161cfbd3300c108466c287e16b57dc53_JaffaCakes118

Files

161cfbd3300c108466c287e16b57dc53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89cfc025be76163987773599440d2aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
TlsAlloc
GetPriorityClass
GetStartupInfoA
EnumResourceTypesW
InitializeCriticalSection
TlsFree
HeapCreate
TlsGetValue
GetFileType

user32

GetDC
LoadCursorW
MessageBoxW
GetUpdateRgn
CreateWindowExW
RegisterClassExW
GetWindowInfo
EndDialog

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ