04eccdf7cb098edc606bcd759c697699_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04eccdf7cb098edc606bcd759c697699_JaffaCakes118
Size

155KB
MD5

04eccdf7cb098edc606bcd759c697699
SHA1

d9acecae42f21ba7b019539af2dc63cdb80b8f8a
SHA256

a9c98eda14386d2022f6cc74f86db3d2b5e347a0217f8da7dbfb550820e7911e
SHA512

d0f8090d98b33efb4556d2673725c2eb8d939b16b1e8a4a831f11db1695e7bf881343be78cd61fafb798054752505fbe948e747ffde83092ac0d54e19dd38734
SSDEEP

3072:L9qg1N4HgmIT3jHn2svpcIx1U4t7IC6RtYdF3sijAHN48vPkmo5d:Bnv4p4bPpc2ee7kt+RsMEoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04eccdf7cb098edc606bcd759c697699_JaffaCakes118

Files

04eccdf7cb098edc606bcd759c697699_JaffaCakes118
.exe windows:4 windows x86 arch:x86

568d064533e32f7bc6f4e396709e60d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindFirstVolumeA
TlsFree
GetPriorityClass
TlsAlloc
EnumResourceTypesW
InitializeCriticalSection
TlsGetValue
GetStartupInfoA
HeapCreate
GetFileType

oleacc

LresultFromObject

user32

GetDC
MessageBoxW
GetWindowInfo
CreateWindowExW
GetUpdateRgn
LoadCursorW
RegisterClassExW
EndDialog

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ