97217c6574ef330f15cd122442d01c3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97217c6574ef330f15cd122442d01c3b_JaffaCakes118
Size

154KB
MD5

97217c6574ef330f15cd122442d01c3b
SHA1

74ac3ec732a064569b5919903e2da23df93c6c64
SHA256

4200e88b1df2e17816c6e4880ee357c9c5048398242c5ce3f7e3aaefdbf12c5a
SHA512

d6da96a72443b5405e25ed3de0dcc3eafb03029dc17b3471b8dd8724bf4cf59154736ac19b586a92583ee723d61c5508c57082cdeba013b34448a6708b7e91ee
SSDEEP

3072:fgphRZs11oQ1TZNq5IswIrnKa4eLR1bxiAWXCz2SLIx4e5:mhns11oANULwI2aLbcAWyz2n4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97217c6574ef330f15cd122442d01c3b_JaffaCakes118

Files

97217c6574ef330f15cd122442d01c3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16d44d30037925e9836aa449c5a6d35f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyW
OutputDebugStringW
MultiByteToWideChar
GetTickCount
CheckRemoteDebuggerPresent
WideCharToMultiByte
lstrcpyW
GetCPInfo
GetACP
lstrcmpiW
EnumResourceTypesA
lstrlenW
lstrcpyA
FindClose
GetLastError
InitializeCriticalSection
DeleteCriticalSection
GlobalAlloc
GlobalFree
LockResource
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

SendMessageW
GetDC
wsprintfW
GetMessageW
SetTimer
PostThreadMessageW
DispatchMessageW
CharUpperW
CharNextW
KillTimer
TranslateMessage
UnregisterClassA

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ