a1993dffefd4eda0f00ec99d210587d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1993dffefd4eda0f00ec99d210587d8_JaffaCakes118
Size

162KB
MD5

a1993dffefd4eda0f00ec99d210587d8
SHA1

d891865a4101a880ecea7b997bd6a6966e956bdb
SHA256

4a6668fec85088e19a086ac10765de06e234b0718bd01043c84dcfad05a69f6d
SHA512

20dd66d9671415cd03d536972af9807142401b50415e77041bb52359bb17bc0d633475d138829c96be04f00a96c0aeb29b715867682b6232519756c2660fbe9e
SSDEEP

3072:D6Y04zcsBxca3YnwpvPqGah3NzcrzB0fHOFb8OY3nxZMdxUHxmnDXeBQ:mY78nwB5adNzAB0fHi8f3nxaIxmn7oQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1993dffefd4eda0f00ec99d210587d8_JaffaCakes118

Files

a1993dffefd4eda0f00ec99d210587d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0544ae810981beeb0813f9c729bab6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
GetStartupInfoA
GetProcessId
TlsFree
EnumResourceTypesA
InitializeCriticalSection
ProcessIdToSessionId
TlsGetValue
TlsAlloc
GetFileType

user32

GetUpdateRgn
RegisterClassExW
CreateWindowExW
LoadCursorW
GetDC
MessageBoxW
GetWindowInfo
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ