70c62bbe3875fc345f0c0cc6734fb57c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70c62bbe3875fc345f0c0cc6734fb57c_JaffaCakes118
Size

157KB
MD5

70c62bbe3875fc345f0c0cc6734fb57c
SHA1

f87ab41b62ae53ddf564772145c3adb7ec63b6a6
SHA256

c928c2691d8757d84d2a908d91e49cd97c2e764c85945b79a0fc290f4feb0b50
SHA512

4a169cf96597eb82bbffc74d45f220d9ddf29a6a38c85749574c5cd74f930584675f8b49627ec99a4f338158d1de88bc624e844547e3c87c73fc230d33f23002
SSDEEP

3072:Z3v0IuEIzjwbHE7IQhTA6YIos58NYZxR/IEdhTDykEcT9YF:hvxxIzjLh5Lg8gsEcZo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70c62bbe3875fc345f0c0cc6734fb57c_JaffaCakes118

Files

70c62bbe3875fc345f0c0cc6734fb57c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7574a6d4138b68e93e18e4b263be712

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
GetWindowInfo
GetUpdateRgn
LoadCursorW
GetDC
CreateWindowExW
MessageBoxW
EndDialog

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetPriorityClass
TlsAlloc
EnumResourceTypesA
InitializeCriticalSection
GetStartupInfoA
TlsGetValue
TlsFree
GetFileType

oleacc

LresultFromObject

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ