e7cf74bc195962039c4e9985c09e19ae_JaffaCakes118 | Triage

Sharing

General

Target

e7cf74bc195962039c4e9985c09e19ae_JaffaCakes118
Size

157KB
MD5

e7cf74bc195962039c4e9985c09e19ae
SHA1

3493ddd8758710f13da7e381a2ca07650d143c7d
SHA256

b1e02a41598f99626f71545601f5b8768dec7194af5014cfc08c3df815612833
SHA512

c7cd868eb9293313017fce4b60035feccf7e5e5b8a72e618e1d3a49a2ee661c076661a581c8a165706fd49f2ad266a255590235b775ce140028ca6ac409b81c8
SSDEEP

3072:e2Y22r5Ml9X8dvEW2w5t3nKJsprZhuo01EDWHZ54TdS7/l7SS7StqXNdmz/:MVril9X8dvt2C3Br01lHb4RSLpreKM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7cf74bc195962039c4e9985c09e19ae_JaffaCakes118

Files

e7cf74bc195962039c4e9985c09e19ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7de0635e4d5edfffbd3b294450099f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
CheckRemoteDebuggerPresent
GetCPInfo
GetLastError
GetACP
WideCharToMultiByte
EnumResourceTypesA
lstrcmpiW
MultiByteToWideChar
GetTickCount
GlobalFree
FindClose
InitializeCriticalSection
LockResource
lstrcpyA
lstrlenW
lstrcpyW
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

wsprintfW
CharUpperW
TranslateMessage
PostThreadMessageW
GetDC
CharNextW
SendMessageW
SetTimer
GetMessageW
DispatchMessageW
KillTimer
UnregisterClassA

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ