54582ea750fc8cc083f6a4e3507ad087_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54582ea750fc8cc083f6a4e3507ad087_JaffaCakes118
Size

176KB
MD5

54582ea750fc8cc083f6a4e3507ad087
SHA1

68c0a01daa49418e950ff7b35ae6063047e43e61
SHA256

ab7602cbd10ca5f535f40f5685dad9e92073e5cb839084f3bafcf4c1cb440825
SHA512

811584c1baa15a5de94aa6fecec68fe7cf617ca8cb8e0dd1ac3a8c879f6de383eacae72fe86f4779e6e15ac0dc3648a4a3d110faca1701fe0021f1c1562e1902
SSDEEP

3072:499scw2wRYg/CS4wmdyQrdhVQZfCGQwCth89zGRy:477wtRY+CjwLQVQR9si9iR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54582ea750fc8cc083f6a4e3507ad087_JaffaCakes118

Files

54582ea750fc8cc083f6a4e3507ad087_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2cbb5feb944daef869d81e625f86e5c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CreateWindowExW
GetDC
LoadCursorW
RegisterClassExW
MessageBoxW
GetWindowInfo
GetUpdateRgn
EndDialog

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
TlsAlloc
GetPriorityClass
HeapCreate
EnumResourceTypesW
InitializeCriticalSection
GetStartupInfoA
TlsFree
TlsGetValue
GetFileType

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ