fa55bb9528be31041960fe8dedfe7a45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa55bb9528be31041960fe8dedfe7a45_JaffaCakes118
Size

158KB
MD5

fa55bb9528be31041960fe8dedfe7a45
SHA1

dff33c03395fbc2459c2047c2b9e593424815e9c
SHA256

d3a49575cde8acbe1904572c18ed89b62f3e82b05530d05baaf12c33c8a008b3
SHA512

d58334ba1850ad949d574d5a3c368ff3f7cb26328a60dee95d9e2acd6fc46635355cf9a07d4a0d1bb144de7662cc3202c8aced84f36d0ebd6b148bce1b5997e9
SSDEEP

3072:B9NfU+vhbuhQxEj1IvCZ/h6CN6of/mkkDbIHaHhhg/LewS:Nf/vluSxJva606ovvaLg/J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa55bb9528be31041960fe8dedfe7a45_JaffaCakes118

Files

fa55bb9528be31041960fe8dedfe7a45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f48e2f634d1bee97d7e10a96e8953c7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

user32

GetUpdateRgn
MessageBoxW
GetDC
LoadCursorW
RegisterClassExW
GetWindowInfo
CreateWindowExW
EndDialog

kernel32

FindFirstVolumeA
TlsFree
GetProcessId
GetStartupInfoA
EnumResourceTypesA
InitializeCriticalSection
ProcessIdToSessionId
TlsAlloc
TlsGetValue
GetFileType

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ