e607b48ab5d67e7a9f826b585de752ab_JaffaCakes118 | Triage

Sharing

General

Target

e607b48ab5d67e7a9f826b585de752ab_JaffaCakes118
Size

163KB
MD5

e607b48ab5d67e7a9f826b585de752ab
SHA1

91e0a026774cd1aa4c8bc4d18eca1eecf0d0eff2
SHA256

bb6ccd4c02c6c51fd0eca7925f1d5fa935984d0d7e1a7e1f892e78d5ff3dc798
SHA512

b6db22c124de681ed4f78793bacb62f15f4a1005abfd9950007c8cb9af6a56c92dfd32422dbf89b8639e8c22c2b7ad23185c94ec1688c3bd19506f6274c3a79c
SSDEEP

3072:iy2dLlMSznkKecXUw4PZXnlyEllrhRUvCDY8Y:i5dxM4kK9iVy+lrzMCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e607b48ab5d67e7a9f826b585de752ab_JaffaCakes118

Files

e607b48ab5d67e7a9f826b585de752ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

026dc4c7899ae155c7652b8a6e6792c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

user32

CreateWindowExW
GetWindowInfo
GetUpdateRgn
EndDialog

kernel32

PrivCopyFileExW
CreateFileMappingA
GetProcessId
MapViewOfFile
EnumResourceTypesA
ExitProcess
AddAtomW
DeleteAtom
ProcessIdToSessionId

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ