JaffaCakes118_59c5b37c788d77f77b5927ef8f6fdb7b | Triage

Sharing

General

Target

JaffaCakes118_59c5b37c788d77f77b5927ef8f6fdb7b
Size

276KB
MD5

59c5b37c788d77f77b5927ef8f6fdb7b
SHA1

73c0b21725f817d410d3a69c5313f6cc48c0ac99
SHA256

15b6b76d2c629f52df262f07fc3c32eed160356e9f52793cb7816324ac555694
SHA512

7db66afed6abc6d605ecdb73d2c9a25908cfadbb2677e4896b5672c64f1e74cac14fd63e9f29fa3e263f3fa6427c13913b51b31069bddd8c225bb5abcc14f0dc
SSDEEP

6144:PCtp6BmQHO+RyQvemdoAx76y7wBRwSwLMtUvh:oxMO+RRvem3xZ+wDvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_59c5b37c788d77f77b5927ef8f6fdb7b

Files

JaffaCakes118_59c5b37c788d77f77b5927ef8f6fdb7b
.exe windows:4 windows x86 arch:x86

f6a0a10a0c7a356a76759d51a229557a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
MultiByteToWideChar
GetDiskFreeSpaceA
CloseHandle
GetModuleFileNameA
lstrlenA
WideCharToMultiByte
GetModuleHandleA
lstrlenW
EnumResourceTypesA
IsBadReadPtr
CreateMailslotA
lstrcpyA
Sleep
GetProcAddress
GetSystemDirectoryA
CreateProcessA
GetSystemInfo
MoveFileExA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

gdi32

GetStockObject

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ