128ca78f15ebb0413aae24501affdc59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

128ca78f15ebb0413aae24501affdc59_JaffaCakes118
Size

173KB
MD5

128ca78f15ebb0413aae24501affdc59
SHA1

1d9e1b966f6af1b6733aa57136dc1d75afde996e
SHA256

fe4fb4b426f296fc886b1543fedeb566fa67c44eb5087281859e941c5bc026a0
SHA512

435ae7d4bbb64bbdbd6e54299263bf932283ee13a99b468c2cb3ca747e7f77f4aaa9c7cb57b65131335020e540f8fd226b969a914e99b08601f346494bd993a1
SSDEEP

3072:uNcpYKEMRRB4EtgYosZVTdQohNTRlpa1zvRVg8pXAd9yE2iDqN3qmVjuZ:uNqrX/EYVZ7pau8pQy/i8s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128ca78f15ebb0413aae24501affdc59_JaffaCakes118

Files

128ca78f15ebb0413aae24501affdc59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a596c8559c8d5d20c6880da0a9bd87e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

SendMessageW
wsprintfW
CharUpperW
PostThreadMessageW
SetTimer
TranslateMessage
DispatchMessageW
GetMessageW
GetDC
CharNextW
KillTimer
UnregisterClassA

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

lstrcpyW
lstrcpyA
lstrcpyW
lstrlenW
WideCharToMultiByte
CheckRemoteDebuggerPresent
MultiByteToWideChar
GlobalFree
GetTickCount
EnumResourceTypesA
GetCPInfo
lstrcmpiW
DeleteCriticalSection
GlobalAlloc
GetLastError
FindClose
GetACP
InitializeCriticalSection
LockResource
OutputDebugStringW
GetModuleHandleW

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ