edf6ca9d5b98c91415ccf111b558edca_JaffaCakes118 | Triage

Sharing

General

Target

edf6ca9d5b98c91415ccf111b558edca_JaffaCakes118
Size

199KB
MD5

edf6ca9d5b98c91415ccf111b558edca
SHA1

68626b8b39bee844a3e3650338aac30e8c297f61
SHA256

be1f65d9537dcb5f4f81724834d80692575b7817e34ed0a0a84686d4e2e53dd7
SHA512

c9ef41c68a0a8155ddc7ac00b341c795df61da36db8e9ef09cc54164ba4c16fff1bdb5af4a577f7fa7f48f1f92a805ce56ee243365d0faa48d5e853b3d5c602b
SSDEEP

6144:xqHhNbbqGSrQf2Q7846hSnwt1JRThXjE:cHPbb32QJw5bXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edf6ca9d5b98c91415ccf111b558edca_JaffaCakes118

Files

edf6ca9d5b98c91415ccf111b558edca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7dbfca819ac5bc079e6d5ae9bda899b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetWindowInfo
MessageBoxW

kernel32

GetTapeStatus
ExitProcess
ClearCommError
LCMapStringA
EnumResourceNamesA
ExitProcess
GetModuleHandleA
GetCPInfo
LCMapStringW
GetProcAddress

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ