JaffaCakes118_6c7bb4113a0d58f807b5b9e4969c5218 | Triage

Sharing

General

Target

JaffaCakes118_6c7bb4113a0d58f807b5b9e4969c5218
Size

158KB
MD5

6c7bb4113a0d58f807b5b9e4969c5218
SHA1

7cbcc835ea606c8fe2bf92080a48466c573dbaa6
SHA256

e2ce2ca491f48506257a74cdcfbdef4559139bd7d6e310afcec7d387ca883d92
SHA512

7ac69a5962fa9c83a51481ab391961f58a411f153c6a8c6e9bed5d7ec2fe8ce37aa1dbf7b19f8e78e71dc17f05ac94434bdd86126492793104381bd162a1293e
SSDEEP

3072:1BYpozFC6+q8FjGt0u2GVrbA8F8sZLc1uCuVSjcwTPAaG:1WpcFCbfu1A8Nhc1uDSjHLS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6c7bb4113a0d58f807b5b9e4969c5218

Files

JaffaCakes118_6c7bb4113a0d58f807b5b9e4969c5218
.exe windows:4 windows x86 arch:x86

ffb887acf4aad9dc59921d1632f9fafe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
TlsFree
GetPriorityClass
TlsAlloc
EnumResourceTypesA
InitializeCriticalSection
TlsGetValue
GetStartupInfoA
ProcessIdToSessionId
GetFileType

user32

GetWindowInfo
RegisterClassExW
MessageBoxW
LoadCursorW
GetDC
CreateWindowExW
GetUpdateRgn
EndDialog

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ