JaffaCakes118_0ef1e455fda8820f79e67f8ff600a17c | Triage

Sharing

General

Target

JaffaCakes118_0ef1e455fda8820f79e67f8ff600a17c
Size

165KB
MD5

0ef1e455fda8820f79e67f8ff600a17c
SHA1

e1d73388cad9bb154eb7c150417ff522a1146b8e
SHA256

a70b39d12d6c991f11e2c964b4ac5e2a3c4569312624a7c4756c1a729d8273e6
SHA512

2b5626c77a327087090b4aab202b4117c5febfbc80a781badcfb910c057ad2cf9594fd1fb0d99cdeed397f1ed80a67af6acacc44db09aa91997d8e5cf5dd5c43
SSDEEP

3072:2H6itpsribe0Lazk+F9x3PGEFYweVDn7KstvyPHEOF2T:tKjad+itQnWstUkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0ef1e455fda8820f79e67f8ff600a17c

Files

JaffaCakes118_0ef1e455fda8820f79e67f8ff600a17c
.exe windows:4 windows x86 arch:x86

b830dea49812c9cbd82fc75367ed8bd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetDC
GetUpdateRgn
RegisterClassExW
GetWindowInfo
CreateWindowExW
MessageBoxW
LoadCursorW
EndDialog

kernel32

FindFirstVolumeA
GetStartupInfoA
GetPriorityClass
TlsFree
EnumResourceTypesW
InitializeCriticalSection
TlsGetValue
HeapCreate
TlsAlloc
GetFileType

oleacc

LresultFromObject

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ