324893b8b46e58cca4c01d5913a82bd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

324893b8b46e58cca4c01d5913a82bd9_JaffaCakes118
Size

155KB
MD5

324893b8b46e58cca4c01d5913a82bd9
SHA1

c583b3d3541e8c6a1116df6f5b0ffc8ead9dc11d
SHA256

c6efb032ac88dcdea0a7fb1f23e9c3975d7d8b840ae438793dd8ae3a0c9efdd2
SHA512

e48bd3f5b1001c4bfd805c7004c4a0133f5b96d39e4061bacb43331a6ea23dd29ccd2744b3917137195714c8efb94a7c01d4dd7812860008a381629c62219aec
SSDEEP

3072:arJnLT7VVyu9cLcz1h/uxBKoHeJfbuVYHFLykX8qsKq5Mu:arJLGu3h/YHeuVXkX8qsKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
324893b8b46e58cca4c01d5913a82bd9_JaffaCakes118

Files

324893b8b46e58cca4c01d5913a82bd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e618a78c735ce125dac68551827070cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject

user32

MessageBoxW
LoadCursorW
GetParent
GetWindowInfo
CreateWindowExW
GetDC
RegisterClassExW
EndDialog

kernel32

lstrcpynW
TlsFree
CheckRemoteDebuggerPresent
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
HeapCreate
TlsAlloc
GetStartupInfoA
GetFileType

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ