JaffaCakes118_607af8de573783ace2166937c4910c10 | Triage

Sharing

General

Target

JaffaCakes118_607af8de573783ace2166937c4910c10
Size

173KB
MD5

607af8de573783ace2166937c4910c10
SHA1

3290efafb6f4649b6f3dd799003b4b15ce974ae2
SHA256

2d7b3252850324176677221e1aab1cc80ff26b98ed70cea42bc6431aed55eefe
SHA512

2e86c06137fa80feba8418852961ff76643b81b792f97a2e931244125a4bea912455da41ab94a4a16ba4d7066bd93def77bad7e700505b9002cfd2bd8c9f39b3
SSDEEP

3072:d7Nl3Rlyf8n99Qjy5WgRjmsiAmiymPqvlmQNJSimU/t3lk:J3j199KijmsiATPqPNJJ3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_607af8de573783ace2166937c4910c10

Files

JaffaCakes118_607af8de573783ace2166937c4910c10
.exe windows:4 windows x86 arch:x86

a219a43216da628290262f7c6b499c60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
GetStartupInfoA
GetProcessId
ProcessIdToSessionId
EnumResourceTypesA
ExitProcess
TlsAlloc
TlsGetValue
TlsFree
GetFileType

user32

GetDC
MessageBoxW
CreateWindowExW
LoadCursorW
GetUpdateRgn
RegisterClassExW
GetWindowInfo
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ