d5a4b0263a511326fb1faf4f5ac1a17f_JaffaCakes118 | Triage

Sharing

General

Target

d5a4b0263a511326fb1faf4f5ac1a17f_JaffaCakes118
Size

158KB
MD5

d5a4b0263a511326fb1faf4f5ac1a17f
SHA1

1f5807acb52588f7807d673177c97f35b93accc9
SHA256

10ab5580d79fa06cb32d623c891fd0ae6d1e648690788392e08b98ffa3d7906b
SHA512

e8b623109714a1190eb580ed581653f723591abc51f4b3370fc09e9216557c51ed888012780d0276094a719555a335784b6f47ba1febb0347904a0387849fc2e
SSDEEP

3072:6F3gsMRrcx5t6iiOdPc1q/E/k16YNBnFP4Xe3DK6LyGtDtCYkL:2gTRrcztKik1ME/A6WXQ4DKACYkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5a4b0263a511326fb1faf4f5ac1a17f_JaffaCakes118

Files

d5a4b0263a511326fb1faf4f5ac1a17f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

873498b155842cec4634c87888c34e3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynW
HeapCreate
CheckRemoteDebuggerPresent
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
TlsAlloc
TlsFree
GetStartupInfoA
GetFileType

oleacc

LresultFromObject

user32

GetParent
GetDC
CreateWindowExW
GetWindowInfo
MessageBoxW
LoadCursorW
RegisterClassExW
EndDialog

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ