JaffaCakes118_3beba00c01a8c927e347a12396049a9e | Triage

Sharing

General

Target

JaffaCakes118_3beba00c01a8c927e347a12396049a9e
Size

168KB
MD5

3beba00c01a8c927e347a12396049a9e
SHA1

f5f0a8713617cccd9cd8e1d93efc7698da997550
SHA256

9e28a0b6cc35f363e7d12b4c4629048d15d3b99cf376bc80253d6ab02afe06c0
SHA512

43912b8e169ffc64c3dfa2e0afc43df58334f73d6d3d0232e42c70e1b16cf58f88a3f0d462ff4c833952f15c925786812f9782fed7fba41a524e994d9c80f348
SSDEEP

3072:H1jdn+HgcoYoCdq4bAhJ3dVjoyiy8ItpTVjhMbW6pe:H5uBkCdqZbVEyiy8IdH6A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3beba00c01a8c927e347a12396049a9e

Files

JaffaCakes118_3beba00c01a8c927e347a12396049a9e
.exe windows:4 windows x86 arch:x86

d8ca3da82e13878251747bfcd78592c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivCopyFileExW
AddAtomW
GetProcessId
MapViewOfFile
EnumResourceTypesA
ExitProcess
DeleteAtom
CreateFileMappingA
ProcessIdToSessionId

oleacc

LresultFromObject

user32

GetUpdateRgn
CreateWindowExW
GetWindowInfo
EndDialog

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ