JaffaCakes118_350eab105ca0aa6c5496d97c7ceb87c5 | Triage

Sharing

General

Target

JaffaCakes118_350eab105ca0aa6c5496d97c7ceb87c5
Size

156KB
MD5

350eab105ca0aa6c5496d97c7ceb87c5
SHA1

fa3559740d432459b55281a6400a783a574bec86
SHA256

9ccc95b4d76030316ab552fae69dbdb126d19cb048ac8306820ba7df634136be
SHA512

523ed4c735037b551e1bc43961026857c8516e32369ab797c05c9aa1b9c1e3fa4c775523e592dc49457cbbfdc7e7f03d599d4da55f35097ddfdac7fddf3573c0
SSDEEP

3072:NgeidsspSREFH/wyI6lKZo1WMlbKm0F6atVc2agaffMHEyaTkvA:TPsO6H5IYYDMlbl0FfW2fafUkpTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_350eab105ca0aa6c5496d97c7ceb87c5

Files

JaffaCakes118_350eab105ca0aa6c5496d97c7ceb87c5
.exe windows:4 windows x86 arch:x86

06eb34e13b1a15856a624329f5ed91bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
GetStartupInfoA
GetPriorityClass
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
TlsAlloc
TlsFree
HeapCreate
GetFileType

user32

CreateWindowExW
MessageBoxW
GetWindowInfo
RegisterClassExW
LoadCursorW
GetDC
GetUpdateRgn
EndDialog

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ