JaffaCakes118_6ae348e7854364850edac14cc13cbd32 | Triage

Sharing

General

Target

JaffaCakes118_6ae348e7854364850edac14cc13cbd32
Size

164KB
MD5

6ae348e7854364850edac14cc13cbd32
SHA1

1172b4bd95d757708520da587e1d0e49b54beb2b
SHA256

4ecb755813a23a0b1d4d172dc7890beb31c8201bd585e6f34f2d2280ac478fee
SHA512

f21d6f37f9ef521353556b680162fdeee46ac5a385e19d2c4967321129d713692e09266f7f2b11bde809e09cd51e1583e951e45dc754fcbe855d010501756732
SSDEEP

3072:L4urZQ8GkP9rSVL/hGcShwLxJzaBD3M8tTAtc1RhrSHul+muhqbY4ZLDWasu8cT8:EcF5uZ9g8xJIlitc1RhrSHZtwLDlsub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6ae348e7854364850edac14cc13cbd32

Files

JaffaCakes118_6ae348e7854364850edac14cc13cbd32
.exe windows:4 windows x86 arch:x86

3b9983bdf964c614e9c6067bff270c42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetDC
MessageBoxW
LoadCursorW
GetWindowInfo
CreateWindowExW
RegisterClassExW
GetParent
EndDialog

oleacc

LresultFromObject

kernel32

lstrcpynW
GetStartupInfoA
CheckRemoteDebuggerPresent
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
HeapCreate
TlsAlloc
TlsFree
GetFileType

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ