c1c7e2c674753a364ada2972c10ec262_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1c7e2c674753a364ada2972c10ec262_JaffaCakes118
Size

158KB
MD5

c1c7e2c674753a364ada2972c10ec262
SHA1

bcf65114c0c49ebabe28206c20eb7fff1be55324
SHA256

dbb8d36f74e9b69f83329fef5a91b3258094ee9ca66a8c8c3e4a4509e0256d82
SHA512

b62d330fbad1342ca7b07343953c217b19f297a4250c4c62401958e5512483f88c748a93bb08b1a78ea5a4b73282c09f4d344a524cc3e99d0c59de0b87c3987f
SSDEEP

3072:vK4LAh6WBKXVzLQqkSQcXJLRQcu3yRy50cGgfEqn:vFLA0WElzLQqkpAo0y5BN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c7e2c674753a364ada2972c10ec262_JaffaCakes118

Files

c1c7e2c674753a364ada2972c10ec262_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d9849145214e4f12e5493fce43823c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

user32

LoadCursorW
CreateWindowExW
GetDC
MessageBoxW
GetUpdateRgn
RegisterClassExW
GetWindowInfo
EndDialog

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetProcessId
TlsAlloc
EnumResourceTypesA
InitializeCriticalSection
TlsGetValue
TlsFree
GetStartupInfoA
GetFileType

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ