beb39815f9eeb6eadd8fc8efc9189e0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beb39815f9eeb6eadd8fc8efc9189e0b_JaffaCakes118
Size

177KB
MD5

beb39815f9eeb6eadd8fc8efc9189e0b
SHA1

1c641eb0ea86c33d2a114d765564fabfda2b376a
SHA256

14dad3783be88051772a4841aa0b993bf3d6cbc7fa43aaac525a37b7fdf03935
SHA512

e4d17197bc8a29b6e8a809479d87ac73d1b322e31e56f121522295a600483712863f277b679be1d022b12a1651dfafeac6d0af1588cb3b31fa45f44189fd9ba0
SSDEEP

3072:zfyhKPwUM9KeqFAhaD+yRUAQU8BW3pbcZo7AcOEfWgY7Et6+fvQCCv+eGc0MhS2Q:z6hx9zV++sUAQ1K2EfWgY7Et6+f8GeGm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beb39815f9eeb6eadd8fc8efc9189e0b_JaffaCakes118

Files

beb39815f9eeb6eadd8fc8efc9189e0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9246315e512c23401ff4731ddbb8698a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

winspool.drv

DocumentPropertiesW

kernel32

lstrcpynW
TlsAlloc
CheckRemoteDebuggerPresent
TlsFree
EnumResourceTypesW
InitializeCriticalSection
TlsGetValue
GetStartupInfoA
TlsSetValue
GetFileType

user32

CreateWindowExW
MessageBoxW
LoadCursorW
GetDC
GetWindowInfo
GetAncestor
RegisterClassExW
EndDialog

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ