82384134682f307b712991058a4331a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82384134682f307b712991058a4331a1_JaffaCakes118
Size

157KB
MD5

82384134682f307b712991058a4331a1
SHA1

35c42906f8bdb862eb13ab663fe1fe49872eb4cc
SHA256

c835a699257af447193eabcb8152d3a2548a32c40ca6ffd17984aac0fb8cb6ab
SHA512

02a41a3c7e2a02bf62d3488a2a648251c64eb12bad206118a3be33194d1d6b6f51727f80a78df69a1df845bbc8adadf4588a8e5b109191c8624dcd014da2fba0
SSDEEP

3072:e2Y22r5Ml9X8dvEW2w5t3nKJsprZhuo01EDWHZ54TdS7/l7SS7StqXNdmz/:MVril9X8dvt2C3Br01lHb4RSLpreKM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82384134682f307b712991058a4331a1_JaffaCakes118

Files

82384134682f307b712991058a4331a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7de0635e4d5edfffbd3b294450099f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
CheckRemoteDebuggerPresent
GetCPInfo
GetLastError
GetACP
WideCharToMultiByte
EnumResourceTypesA
lstrcmpiW
MultiByteToWideChar
GetTickCount
GlobalFree
FindClose
InitializeCriticalSection
LockResource
lstrcpyA
lstrlenW
lstrcpyW
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

wsprintfW
CharUpperW
TranslateMessage
PostThreadMessageW
GetDC
CharNextW
SendMessageW
SetTimer
GetMessageW
DispatchMessageW
KillTimer
UnregisterClassA

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ