d347ed21b17e96a5de6f2b523c58e65f_JaffaCakes118 | Triage

Sharing

General

Target

d347ed21b17e96a5de6f2b523c58e65f_JaffaCakes118
Size

157KB
MD5

d347ed21b17e96a5de6f2b523c58e65f
SHA1

8ea2c6db99703d12a35dbf006e8267e80f64283a
SHA256

d62b217aaeb2031746dab59a853839ba8efbb307dcf5800e0b2a53bb4b91d179
SHA512

66724d3855875f1452988943b0e798a6fd55fbff001ff768501efe35449cf9c001b4dbc6ccffc5abf50c2f1321f59f013b598c344d8e042ff447aeaadee555bd
SSDEEP

3072:YT3pidu3egrYwCimEkoeQ03EVqvpKG4dLqI+23pozxL6J6R:YTsYKwZmMXBYvp28I+23Cz0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d347ed21b17e96a5de6f2b523c58e65f_JaffaCakes118

Files

d347ed21b17e96a5de6f2b523c58e65f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b0861af1cb30d8de73384dd4da540c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

MessageBoxW
GetParent
LoadCursorW
CreateWindowExW
GetWindowInfo
RegisterClassExW
GetDC
EndDialog

oleacc

LresultFromObject

kernel32

lstrcpynW
TlsAlloc
CheckRemoteDebuggerPresent
TlsFree
EnumResourceTypesW
InitializeCriticalSection
HeapCreate
TlsGetValue
GetStartupInfoA
GetFileType

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ