404d0427ec266f5d6c7efd6d06ff8b04_JaffaCakes118 | Triage

Sharing

General

Target

404d0427ec266f5d6c7efd6d06ff8b04_JaffaCakes118
Size

158KB
MD5

404d0427ec266f5d6c7efd6d06ff8b04
SHA1

62694ed51af1261494c205c353162f667b154ff4
SHA256

7914877504d6ecf6a2e6cdb44be4a61b8f5104a6dc406f8f4ac8e536a957b7d8
SHA512

be61d43207702febf38702dee00254d0706d0f1cab1be7689881aff3d5d9bf59eb2edc495105a1303af9b4026f5fade7a1f77d80ecb7baa90c32cc9760f8773a
SSDEEP

3072:+nOyU5aSxU9SCdHkW+5aTFl9GF8Y3QyxoPbV5Eq:EOyU5uSCWWSapl9Vu94H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
404d0427ec266f5d6c7efd6d06ff8b04_JaffaCakes118

Files

404d0427ec266f5d6c7efd6d06ff8b04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b97c28d8cfa03555ac1e8f74c9feab1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

user32

GetDC
MessageBoxW
LoadCursorW
CreateWindowExW
RegisterClassExW
GetUpdateRgn
GetWindowInfo
EndDialog

kernel32

FindFirstVolumeA
TlsFree
GetPriorityClass
TlsAlloc
EnumResourceTypesW
InitializeCriticalSection
GetStartupInfoA
TlsGetValue
HeapCreate
GetFileType

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ