44221d2bc9df5514209230c7330fca96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44221d2bc9df5514209230c7330fca96_JaffaCakes118
Size

164KB
MD5

44221d2bc9df5514209230c7330fca96
SHA1

2fa7c49172c4db1be946d82318c03fa3c3f3b5f5
SHA256

50f6889f99d3225a1f2708606907821df3ea593d39da1b24c56d68d2ff217110
SHA512

71c8a6e719eda429ad0441fe4355821e7d9ca4b7d17b5f08207adaeed56592268aa98413c4fb367d3ba43eef08cda080a316faf6d7aa06ed3f3931f3be60ce28
SSDEEP

3072:l15en6TOPzqM5Wq2j8lf/1n27/4QHEKxZYtspMkndHWcqMpV4sE:Ls66P2GWq/BtS4QDHYtUnw8EsE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44221d2bc9df5514209230c7330fca96_JaffaCakes118

Files

44221d2bc9df5514209230c7330fca96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17e2a3225f02cdf88e06abdeab05cff9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
TlsGetValue
GetPriorityClass
TlsFree
EnumResourceTypesW
InitializeCriticalSection
GetStartupInfoA
TlsAlloc
HeapCreate
GetFileType

user32

LoadCursorW
GetDC
GetWindowInfo
GetUpdateRgn
RegisterClassExW
CreateWindowExW
MessageBoxW
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ