42ba70d17dbe6e4b2807cbd46e390866_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ba70d17dbe6e4b2807cbd46e390866_JaffaCakes118
Size

176KB
MD5

42ba70d17dbe6e4b2807cbd46e390866
SHA1

6cd9adb1b7520b2e006cad08be631d6039133082
SHA256

b532b2055321f3ab4bb15ea7697ae2fb06f474a9556a23b428435fc704facfb3
SHA512

4f8d2ff788ee887d1c6719082ffca36440c0feed0c0fc3265a60a363adc046057394a9aa696af7e767cfad546e295563dd817aa3a4cf48042eaf843425d406bc
SSDEEP

3072:aBIdb5BNQ9+PBInDPOui4dkGfwg7zwOUhda5YQCivnugeVrKZT+CCeFRWTD:9b5DtInDPtPdkewg/Vz21ZhaCeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ba70d17dbe6e4b2807cbd46e390866_JaffaCakes118

Files

42ba70d17dbe6e4b2807cbd46e390866_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78a24db10345ff3cdc46f4053737aaad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW
MessageBoxW
LoadCursorW
GetDC
RegisterClassExW
GetWindowInfo
GetUpdateRgn
EndDialog

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetPriorityClass
TlsGetValue
EnumResourceTypesA
InitializeCriticalSection
GetStartupInfoA
TlsAlloc
TlsFree
GetFileType

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ