78ce5e1f44dad1f0ef1d0c0828209b49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78ce5e1f44dad1f0ef1d0c0828209b49_JaffaCakes118
Size

197KB
MD5

78ce5e1f44dad1f0ef1d0c0828209b49
SHA1

358c583ae696c65f553e30fc4ef60b0f37977e12
SHA256

d1274f56daa0adde20f442755f8baf67f4211a5284122f9d7ccb08395a654675
SHA512

437b8fa7611b20b56abe72b41f28ec2f04b7f6d5644026669991f1f549705b4fd9ce65de5f52a86740efb344f6bc6da6ec2525fd931c250cc256aa262899606a
SSDEEP

6144:CV/2SadMGT/nw6eIuGO+wLwVgj5jPtvp5WYQWZ3:ERzGZezLw25xvpYYQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78ce5e1f44dad1f0ef1d0c0828209b49_JaffaCakes118

Files

78ce5e1f44dad1f0ef1d0c0828209b49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f53408850e1cf75afc5d00d8c206ee4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetWindowInfo
MessageBoxW

kernel32

CreateTapePartition
GetModuleHandleA
ClearCommError
ExitProcess
EnumResourceNamesA
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetProcAddress

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ