fbee4da6592412109584af4ce3b326d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbee4da6592412109584af4ce3b326d8_JaffaCakes118
Size

175KB
MD5

fbee4da6592412109584af4ce3b326d8
SHA1

e130953585cad6a9b4a42e80035e4073962f5b43
SHA256

19fa0d0267d64c5e9b5dfe1f30a0c501456de293582f7997d102c35c4f7a6f0b
SHA512

8dc8f579846d69e664cfdb2f2b8ae578886b08013d616d7d83b00fb486104dcd8a3c9ef036efe020eec39263565cacb13872c22e1fd487c2bef0d5a4bbec1eae
SSDEEP

3072:aq40Atr/HVgRKuWUAcCTUTIAKYM7lXBhHeXhSbtq8jfe:aGi1g/WUADP/X48q8De

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbee4da6592412109584af4ce3b326d8_JaffaCakes118

Files

fbee4da6592412109584af4ce3b326d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc540ed5a9f8bde9ff4be1fc318f626d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetPriorityClass
TlsAlloc
EnumResourceTypesA
InitializeCriticalSection
GetStartupInfoA
TlsFree
TlsGetValue
GetFileType

oleacc

LresultFromObject

user32

RegisterClassExW
GetDC
GetWindowInfo
MessageBoxW
LoadCursorW
CreateWindowExW
GetUpdateRgn
EndDialog

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ