JaffaCakes118_17ab588760812f3fc9cdd6c85a6c34e7 | Triage

Sharing

General

Target

JaffaCakes118_17ab588760812f3fc9cdd6c85a6c34e7
Size

164KB
MD5

17ab588760812f3fc9cdd6c85a6c34e7
SHA1

379a496e1f8bee02911556afb6c64276f01b636d
SHA256

4c1c9aed83b91a704398f6958342c990f38333ca08b638006c4c8d49c79ce233
SHA512

94ad538c9d0b5e00cb381395d86fc1d302abaad7406696a05c4acf59a7173bcba8b9fa3b82cd76491f3e9394c6309dc01360fa74ba0d32f73d91e91f27b9cb4a
SSDEEP

3072:GmfJmOJHYuBuyWKfo1y+/Ihyt3hJWQ8V+yAsOezzEOYHq0aIcZtL:IONYuBuyIYtQgzOezRYHqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_17ab588760812f3fc9cdd6c85a6c34e7

Files

JaffaCakes118_17ab588760812f3fc9cdd6c85a6c34e7
.exe windows:4 windows x86 arch:x86

e5d339214efcd91cd8886f3b964bedc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW
GetWindowInfo
GetUpdateRgn
LoadCursorW
MessageBoxW
GetDC
RegisterClassExW
EndDialog

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
TlsAlloc
GetPriorityClass
TlsGetValue
EnumResourceTypesA
InitializeCriticalSection
ProcessIdToSessionId
GetStartupInfoA
TlsFree
GetFileType

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ