896c53e42b96cae93412e22aaeb68c28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

896c53e42b96cae93412e22aaeb68c28_JaffaCakes118
Size

156KB
MD5

896c53e42b96cae93412e22aaeb68c28
SHA1

30fac30b2da0108f865023c56d634dd964a1e7f9
SHA256

097766be0ce33ec691971be3f56cf06b3f1748db2f8c03a82c829f5e3a7f4ead
SHA512

dd42d92432fe3483a3538fd9ad86983c14a7e2d6d8f6a50a1ef711fced06f93b87ce0829a2cd9621aa0e8a579b94424abbd003c94cd43cf3925455c3101db009
SSDEEP

3072:25TaDDqAIsDShoqzhhEB86o8qjJxJ15cTRWx4/F5xUTwjbp:25TQIe+hq+6o8QJ15w049Hfnp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896c53e42b96cae93412e22aaeb68c28_JaffaCakes118

Files

896c53e42b96cae93412e22aaeb68c28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddfed04feca535d3938a70bf264f5db8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetConsoleTitleA
GetStartupInfoA
GetPriorityClass
HeapCreate
EnumResourceTypesW
InitializeCriticalSection
TlsFree
TlsAlloc
TlsGetValue
GetFileType

oleacc

LresultFromObject

user32

CreateWindowExW
GetWindowInfo
LoadCursorW
GetUpdateRgn
MessageBoxW
RegisterClassExW
GetDC
EndDialog

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ