JaffaCakes118_aaa9728f232ce790507a974c92400969 | Triage

Sharing

General

Target

JaffaCakes118_aaa9728f232ce790507a974c92400969
Size

155KB
MD5

aaa9728f232ce790507a974c92400969
SHA1

2b8859157bfe1443f98d88cff9c0cee68f11f304
SHA256

20018b30057a9f5d885dadf9b227388272cdd5954603606feaf3fd4428a89d92
SHA512

18ac712e87d8a0e909a5df37ae36eb591736723c2084c455523cfdd4dbef10b3013f39279e5c799aec827c69c15769142866d9cd3fc379ee9d02f2f766ee237a
SSDEEP

3072:aG2Ijl2W/sfpK2EN91X6L7shNw68dcZMfkNB4KBOjS8LDFFENC:7XkZ0PKMhNLCyMfuZOjS8NFEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_aaa9728f232ce790507a974c92400969

Files

JaffaCakes118_aaa9728f232ce790507a974c92400969
.exe windows:4 windows x86 arch:x86

31bf2199101e727bc3b28f5db6bcb868

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
TlsAlloc
GetPriorityClass
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
GetStartupInfoA
HeapCreate
TlsFree
GetFileType

user32

GetDC
GetWindowInfo
CreateWindowExW
MessageBoxW
LoadCursorW
GetUpdateRgn
RegisterClassExW
EndDialog

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ