1ad3128ccd93a25efc6c08b7db8b001f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ad3128ccd93a25efc6c08b7db8b001f_JaffaCakes118
Size

187KB
MD5

1ad3128ccd93a25efc6c08b7db8b001f
SHA1

daa2a19f9da3f26463290db841d427ef807ff087
SHA256

44180dc9dfd679bfb60010db11d3a2c6f799f7e97a7db300710ef2dd4c81e49c
SHA512

623ff72c93a2f72bf33c0879fe0cb9f3994366804a73090d656a5d1550bdea1cd7cab1f2f54b606908685a120dc6c57389697f68a611fb710820e8bc13116a0f
SSDEEP

3072:7muathnR+WLfCftdFwdI3IfTNWJAYSvLx4y3jds/PFjRCBf1FKoLJkejf6KDLR9s:Nak8KrFQI4fT2Mx4KjdqPCBfzDJkejSL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ad3128ccd93a25efc6c08b7db8b001f_JaffaCakes118

Files

1ad3128ccd93a25efc6c08b7db8b001f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dda2f3710c25aa56d3724bd84cc59033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetWindowInfo
MessageBoxW

kernel32

CreateTapePartition
GetCPInfo
ClearCommError
LCMapStringA
EnumResourceNamesA
ExitProcess
LCMapStringW
GetModuleHandleA
ExitProcess
GetProcAddress

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ