529f94c55e290bc95d0826564173550b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

529f94c55e290bc95d0826564173550b_JaffaCakes118
Size

169KB
MD5

529f94c55e290bc95d0826564173550b
SHA1

e8624aa357fad02ca8260146ae4145ed70fc71c9
SHA256

66337fa0500ccf52c6164a5e299c94bcbbfa329d5cd15de8ae0af7f5a0b49d51
SHA512

455ae10299782ebf14471177c42f75cd42c9705e3af169c61d359377bffc1b7c224ec36afa10d331cc005ca682b5b872acbab45ba77d90b095912c8e3f20bb8a
SSDEEP

3072:YGCXtAAR6rwMuw4SJkTuxCHDQbQk2S3eFDaQDdpAQ9vPN8Vd7Cap3kbu7gQZO:zCXDmwMAqCjQck5enuCvPN8VNZxkbtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
529f94c55e290bc95d0826564173550b_JaffaCakes118

Files

529f94c55e290bc95d0826564173550b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fcae73808113141c06135a6d1afa754

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
GetStartupInfoA
GetPriorityClass
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
TlsFree
TlsAlloc
HeapCreate
GetFileType

user32

LoadCursorW
RegisterClassExW
MessageBoxW
GetWindowInfo
GetDC
CreateWindowExW
GetUpdateRgn
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ