8ebb5d6d5f2dcdd33a82bc2153ba9f23_JaffaCakes118 | Triage

Sharing

General

Target

8ebb5d6d5f2dcdd33a82bc2153ba9f23_JaffaCakes118
Size

175KB
MD5

8ebb5d6d5f2dcdd33a82bc2153ba9f23
SHA1

c84e0f1196dcb96871d2d06839cd07ce0fa949f0
SHA256

5e8b23b7b147823fc733d78fc1ffd4b48eade62c4651c92160bef5c8af2c5902
SHA512

2531fdfba2b85eb420b0cdbf73cc448690c56de0f0cd610da272477f3181de66ccc1b586b4792457ed37d5625a5299fc920f6f7af202d564629a20c46404e89e
SSDEEP

3072:la7TcoqnNcv2NhgLWOv9LTOedfLjH0wQm8gz2Ixf:5oqevYhgSOlTRLjHCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ebb5d6d5f2dcdd33a82bc2153ba9f23_JaffaCakes118

Files

8ebb5d6d5f2dcdd33a82bc2153ba9f23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3fa6e85386d7ae027c66e2755bf3431

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

PrivMoveFileIdentityW
GetFileAttributesA
AddAtomW
GetProcAddress
SystemTimeToFileTime
DuplicateHandle
WriteFile
GetSystemTime
CloseHandle
ReleaseMutex
GetStdHandle
OutputDebugStringW
GetProcessId
UnmapViewOfFile
LoadLibraryA
LoadLibraryExW
VirtualAlloc
GetModuleFileNameW
OpenProcess
SetEvent
WaitForSingleObject
MoveFileW
EnumResourceTypesA
CreateMutexA
CreateEventA
ExitProcess
GetFileAttributesW
lstrcpynW
CreateFileW
GetUserDefaultUILanguage
DeleteAtom
ProcessIdToSessionId
CreateDirectoryW
MapViewOfFile
LoadLibraryW
VirtualFree
CreateFileMappingA
FindAtomW

user32

GetDC
GetWindowInfo
MessageBoxW
CreateWindowExW
GetUpdateRgn
RegisterClassExW
LoadCursorW
EndDialog

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ