JaffaCakes118_36041f07b7fb1fa6671b0dc78d65072a | Triage

Sharing

General

Target

JaffaCakes118_36041f07b7fb1fa6671b0dc78d65072a
Size

169KB
MD5

36041f07b7fb1fa6671b0dc78d65072a
SHA1

4e0a3e5c8ed5a8e79add472a54583580530d5345
SHA256

282a5560dd15d62af747fbe53e9de12d5b868679409da64eca0064e41b2c8e79
SHA512

3b6619497cff93926471a26afbd11083f393536146ea62621b8d14d0960faf4ba7ec6ae99d12743ea59e4e29d1f22461a2e9fe1f8625f44601d1ae0a09ac8ad0
SSDEEP

3072:VkyY5mEzWsPWjLIb+qyk5+KQrCDT9Oeh2telcvkWck78yXNd6HqY:VC5mEasPHbXXQrqrlcvqkH/6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_36041f07b7fb1fa6671b0dc78d65072a

Files

JaffaCakes118_36041f07b7fb1fa6671b0dc78d65072a
.exe windows:4 windows x86 arch:x86

cca5a78a85d489725090a65c991177e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
LoadCursorW
GetUpdateRgn
GetWindowInfo
MessageBoxW
GetDC
CreateWindowExW
EndDialog

kernel32

FindFirstVolumeA
TlsGetValue
GetPriorityClass
ProcessIdToSessionId
EnumResourceTypesA
InitializeCriticalSection
TlsFree
GetStartupInfoA
TlsAlloc
GetFileType

oleacc

LresultFromObject

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ