f6389723b1d07798fde6728ba2ec58f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6389723b1d07798fde6728ba2ec58f9_JaffaCakes118
Size

157KB
MD5

f6389723b1d07798fde6728ba2ec58f9
SHA1

915cbfe586ec849d6e1743455979839f06faf650
SHA256

d8a86c9fac40ab2ff37bc3723aa78f3fb46e3e93f321a8e7414c63b9ce27254a
SHA512

ca43eb931201f4cbea4df77717ccedb021d1b0e638439ad0f83e6202f9e96e33bc2a947fd390439ae2e8fb1970a2828841c3ad7d5130fa079283facd877acf71
SSDEEP

3072:Z3v0IuEIzjwbHE7IQhTA6YIos58NYZxR/IEdhTDykEcT9YF:hvxxIzjLh5Lg8gsEcZo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6389723b1d07798fde6728ba2ec58f9_JaffaCakes118

Files

f6389723b1d07798fde6728ba2ec58f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7574a6d4138b68e93e18e4b263be712

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
GetWindowInfo
GetUpdateRgn
LoadCursorW
GetDC
CreateWindowExW
MessageBoxW
EndDialog

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetPriorityClass
TlsAlloc
EnumResourceTypesA
InitializeCriticalSection
GetStartupInfoA
TlsGetValue
TlsFree
GetFileType

oleacc

LresultFromObject

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ