66e16aa751d32f1f7a9ae3b81111f0e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66e16aa751d32f1f7a9ae3b81111f0e7_JaffaCakes118
Size

180KB
MD5

66e16aa751d32f1f7a9ae3b81111f0e7
SHA1

f4b986e10c17cb705740deff6d80651bdf61107a
SHA256

d8140d782d64508a46ee19095a9b4f4f7682149f891efcb93232d6c3176c5b65
SHA512

df8f0673983eb058ca7b0b42c39d06340579ea4dfdcf6d23b5fc1290a1f7e44615e246a016622884aec8a690d3f91be3b431eb1f45b76851bf3a535b0204853c
SSDEEP

3072:YuAawqYNHA5MvwwKe3BQ5FBO/lxIGcczSOjnI1M9tWUKxmfEmpTc:Y/aT6Hnvw7e3BQ5FBOTTjI8WUsZx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e16aa751d32f1f7a9ae3b81111f0e7_JaffaCakes118

Files

66e16aa751d32f1f7a9ae3b81111f0e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b34ce27c96516b80a1dfc45e6f477836

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivCopyFileExW
AddAtomW
GetProcessId
CreateFileMappingA
EnumResourceTypesA
ExitProcess
MapViewOfFile
DeleteAtom
ProcessIdToSessionId

user32

GetWindowInfo
CreateWindowExW
GetUpdateRgn
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ