25b24a9b9d60c4b89dc82a64c8cc6b12_JaffaCakes118 | Triage

Sharing

General

Target

25b24a9b9d60c4b89dc82a64c8cc6b12_JaffaCakes118
Size

182KB
MD5

25b24a9b9d60c4b89dc82a64c8cc6b12
SHA1

ec8c449f38917d7e73118d52c97ce131795b3737
SHA256

b9ae618068a7b38440cf976f30f972d0d8c789b5bdac687488a98b92c77f2ba6
SHA512

73b81feab9e7ae63af075ff348a0e6b8da2b1b085c9fff1f4289aad2f00a40c833a04f3e740c6621a607491a555bfd57e4f4f819a07c9a3b987af05a0dd8a41d
SSDEEP

3072:/PVaWd4f6VvPj9Gqp2TYwMMzlFIAlHepS2Bp8S/hohourdZ+tjVB25Z7K:/BPJGVEFTSKayu0VB25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b24a9b9d60c4b89dc82a64c8cc6b12_JaffaCakes118

Files

25b24a9b9d60c4b89dc82a64c8cc6b12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8d618734b5eca9645998dec9dc80710

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

user32

GetUpdateRgn
LoadCursorW
MessageBoxW
GetDC
GetWindowInfo
RegisterClassExW
CreateWindowExW
EndDialog

kernel32

FindFirstVolumeMountPointA
GetStartupInfoA
GetProcessId
TlsFree
EnumResourceTypesA
ExitProcess
ProcessIdToSessionId
TlsAlloc
TlsGetValue
GetFileType

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ