JaffaCakes118_29075468a5d9b898cf73432f39095388 | Triage

Sharing

General

Target

JaffaCakes118_29075468a5d9b898cf73432f39095388
Size

196KB
MD5

29075468a5d9b898cf73432f39095388
SHA1

b33d32759fa8c9f338f9063e0bf1abcc345bb188
SHA256

4f0181c458529c7c39b1fdfae44dfcc66016a24775204506ef0d1f6b7406efb3
SHA512

b0e304c5a6d1b2c2cc7f5c9450c3f8b74d431d79940e437897fd5acecafa8a4cb70d343a81ab29fd17f9aa5694fe7efa21e91853b979305e2a213e50b5ef6b67
SSDEEP

3072:gHnr/IOOuENp0zJyeqVRQ63ZvwzyN/z62pdLasPzePzQyc9fjRhJ9spzxwhkV9DK:gCMTqrtwzyN1esbIOKwm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_29075468a5d9b898cf73432f39095388

Files

JaffaCakes118_29075468a5d9b898cf73432f39095388
.exe windows:4 windows x86 arch:x86

ed9e2d6853cd63d1844cd379e1b0197d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
TlsAlloc
GetProcessId
TlsFree
EnumResourceTypesA
InitializeCriticalSection
ProcessIdToSessionId
GetStartupInfoA
TlsGetValue
GetFileType

user32

LoadCursorW
RegisterClassExW
GetWindowInfo
GetDC
MessageBoxW
CreateWindowExW
GetUpdateRgn
EndDialog

oleacc

LresultFromObject

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ