d9f064b2aade152724906037524682db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f064b2aade152724906037524682db_JaffaCakes118
Size

167KB
MD5

d9f064b2aade152724906037524682db
SHA1

8a0d36be86ecd52877600c27d9edc5bf04fb1197
SHA256

1b9f9ba055ec25917dbc2f135cc9ba121f1953709a7494f8cdbf375782dd1968
SHA512

3274eed3119d00794cb9e25b16309b5883cf701b0cae2e31e7c9a484c2d5f70c014cf7d793e18391ba88c8ada6a2eae4dfeb692796ae6accb863c3fed6942632
SSDEEP

3072:tbJfCvBw3WNcmccG6qcSR2uE4mgHiKnQ0kltHBDsgqBDIZetPA3mxPUGj:VJfUB1cmbXqnVE4mg5dctKgqeetA2xx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f064b2aade152724906037524682db_JaffaCakes118

Files

d9f064b2aade152724906037524682db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5a07142f5155875225822caaeca1d7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

TranslateMessage
SetTimer
CharUpperW
GetMessageW
PostThreadMessageW
CharNextW
wsprintfW
KillTimer
SendMessageW
GetDC
DispatchMessageW
UnregisterClassA

kernel32

lstrcmpiW
lstrcpyW
GetTickCount
DeleteCriticalSection
LockResource
GetCPInfo
CheckRemoteDebuggerPresent
MultiByteToWideChar
lstrcpyW
WideCharToMultiByte
EnumResourceTypesA
FindClose
OutputDebugStringW
lstrlenW
GlobalAlloc
InitializeCriticalSection
GlobalFree
GetACP
lstrcpyA
GetLastError
GetModuleHandleW

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ