949ae9bb8330f45cc4378e5f5bf1bbba_JaffaCakes118 | Triage

Sharing

General

Target

949ae9bb8330f45cc4378e5f5bf1bbba_JaffaCakes118
Size

176KB
MD5

949ae9bb8330f45cc4378e5f5bf1bbba
SHA1

19b85b8150c744b9b2c5c027d41e8592fec87637
SHA256

18b65c9b374b1a6698574c658d8016d5cf4cbed1732c77159bffdb8773586d2a
SHA512

a40b755d9954b07fb5782a991f62c95016cc3603cd02ac4c2c7a655ae7a39b1c474633c0006fcef6a1103565867c6d9b7e4cf4409c5e6ae0e796e331bfba636d
SSDEEP

3072:e16pfhRXGN5muRWCXaQ7zPmxxf6Z4SDxbK7XSzgLb4Rbv3Jg3+9FHF4T5:5MXKQfZMXSzguv3uqF+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949ae9bb8330f45cc4378e5f5bf1bbba_JaffaCakes118

Files

949ae9bb8330f45cc4378e5f5bf1bbba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36848c1d4150149fe0eb21682f726b4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
TlsAlloc
GetPriorityClass
GetStartupInfoA
EnumResourceTypesA
InitializeCriticalSection
ProcessIdToSessionId
TlsFree
TlsGetValue
GetFileType

user32

GetWindowInfo
LoadCursorW
GetDC
CreateWindowExW
MessageBoxW
RegisterClassExW
GetUpdateRgn
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ