JaffaCakes118_b952132f41d08e1b569cf2733fad1e9d | Triage

Sharing

General

Target

JaffaCakes118_b952132f41d08e1b569cf2733fad1e9d
Size

178KB
MD5

b952132f41d08e1b569cf2733fad1e9d
SHA1

ba8d4783f0afd505f912a3280744822bdda3a763
SHA256

af40c8547c51a7a1ed8f0ac083467165195521d243dba5bd15c39778a4153f75
SHA512

2d4e2128b9a4b79bf1f69f1bfd55e6350807c7a6a921ef4e8c1814c0474f16648de341fc3451277b916109f5472ef90f4149123cb19164cb84e8f93e0fdfd152
SSDEEP

3072:trmh2DkOci708qtdmf4JLzR6S7vbm8dQHpu7pGIB07HHHeN5DOsgGKxv5:EhHimfn0S/xKHpqna7n+3DRKxv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b952132f41d08e1b569cf2733fad1e9d

Files

JaffaCakes118_b952132f41d08e1b569cf2733fad1e9d
.exe windows:4 windows x86 arch:x86

07772bc5d1d9ba86a0c3221b208d5009

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynW
TlsAlloc
CheckRemoteDebuggerPresent
HeapCreate
EnumResourceTypesW
InitializeCriticalSection
TlsGetValue
TlsFree
GetStartupInfoA
GetFileType

oleacc

LresultFromObject

user32

GetDC
LoadCursorW
RegisterClassExW
GetWindowInfo
GetParent
MessageBoxW
CreateWindowExW
EndDialog

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ