5725301e94a00e3e374774dd3515ad58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5725301e94a00e3e374774dd3515ad58_JaffaCakes118
Size

172KB
MD5

5725301e94a00e3e374774dd3515ad58
SHA1

9b4e1679cebeb4444bc3d6248936b510d451ee6b
SHA256

630cef6c1363e8490864c902e93d75a36445c5194f6c15d93b56c30ebdb62958
SHA512

505846a6727ae9cade843c1790b03b8f119e25d0c15b7fd389a5618595241ed54bf430eacc08cf77e132464f0adf111c85357de39741650fe0f6b64dd410e00d
SSDEEP

3072:zlhNtBi1961UtawA2WBf+0rgnfgEOEbkmiB9:zvNtBiT61CO2C+qEjkmiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5725301e94a00e3e374774dd3515ad58_JaffaCakes118

Files

5725301e94a00e3e374774dd3515ad58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

610c2a63e4049730a5e35c723afcc225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

PrivCopyFileExW
CreateFileMappingA
GetProcessId
AddAtomW
EnumResourceTypesA
ExitProcess
MapViewOfFile
DeleteAtom
ProcessIdToSessionId

user32

GetUpdateRgn
CreateWindowExW
GetWindowInfo
EndDialog

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ