4baf569a2eefd6a09709ad00b3fc97bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4baf569a2eefd6a09709ad00b3fc97bf_JaffaCakes118
Size

155KB
MD5

4baf569a2eefd6a09709ad00b3fc97bf
SHA1

0320f9684a61f29d872b6f2821fe3dde998266de
SHA256

1a3e20330ec644ab78fec5f39261466edb06fae3755765e5a49e931345db878b
SHA512

9d74d1526d2fa446408e0f7acfbf251b828715fb8a25c52b7468aebf9b7a007c1477fa0fb41c8544ed0479765a3730f6052d02836dca8a3a9783d0a495af7b67
SSDEEP

3072:xtnNFd2mnSWCiUDj7eZTpD30p7zUMe/HOiHr3HbfggyDv6SLLnQGDV:dF8e0D3sD+7zy/HnHrgR3dDV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4baf569a2eefd6a09709ad00b3fc97bf_JaffaCakes118

Files

4baf569a2eefd6a09709ad00b3fc97bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

065369a2cdecf4d67edbf13d764abb8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
GetStartupInfoA
GetPriorityClass
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
HeapCreate
TlsAlloc
TlsFree
GetFileType

oleacc

LresultFromObject

user32

RegisterClassExW
LoadCursorW
GetWindowInfo
MessageBoxW
GetDC
GetUpdateRgn
CreateWindowExW
EndDialog

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ