JaffaCakes118_d42f67a3c6498615ec0aa6a6111398fd | Triage

Sharing

General

Target

JaffaCakes118_d42f67a3c6498615ec0aa6a6111398fd
Size

164KB
MD5

d42f67a3c6498615ec0aa6a6111398fd
SHA1

672209922587af5d4b9d810c10e75e2eac0c98a2
SHA256

4c6aa7ff2628bf9f5cbeea4cd70b7fb2dbf33de41a789082b8232733a17a8324
SHA512

bc6bfd84ccb72f4aa3e118ee00d9f0aee18ab8354c964648cca5f9b53eed1512a6f0dca0f584172c90ca3c28b7a1ae26b96c53c6da7bffe06949153b8af11663
SSDEEP

3072:L4urZQ8GkP9rSVL/hGcShwLxJzaBD3M8tTAtc1RhrSHul+muhqbY4ZLDWasu8cT8:EcF5uZ9g8xJIlitc1RhrSHZtwLDlsub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d42f67a3c6498615ec0aa6a6111398fd

Files

JaffaCakes118_d42f67a3c6498615ec0aa6a6111398fd
.exe windows:4 windows x86 arch:x86

3b9983bdf964c614e9c6067bff270c42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetDC
MessageBoxW
LoadCursorW
GetWindowInfo
CreateWindowExW
RegisterClassExW
GetParent
EndDialog

oleacc

LresultFromObject

kernel32

lstrcpynW
GetStartupInfoA
CheckRemoteDebuggerPresent
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
HeapCreate
TlsAlloc
TlsFree
GetFileType

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ