JaffaCakes118_1d8709a213120dcc8e2c9cc454d93891 | Triage

Sharing

General

Target

JaffaCakes118_1d8709a213120dcc8e2c9cc454d93891
Size

183KB
MD5

1d8709a213120dcc8e2c9cc454d93891
SHA1

4597a53cfdb50f2c2b0aab6479d23409368ac0de
SHA256

0d85ac6300886bb171e8e6345ac049c3a1efa70db96c5e84ad4cc3abf8a32920
SHA512

bda4fcc4cb041cbdf3a86fd19ba11bdb68827efdd6542bb1cf518600199e24822bd7728a0b839c9ffa7743d3ab5fd805d30e38799ef882ba43d1e748ec28a470
SSDEEP

3072:rltZnjFQ2sjrJ/FWNZtFw+4VEH3vGEjbvrnpmSk/FH9dzrJLYBOBT6u4mpDM476B:rl/eZjtAsGH3vdjbvrn0ZzFYBmlFDMvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1d8709a213120dcc8e2c9cc454d93891

Files

JaffaCakes118_1d8709a213120dcc8e2c9cc454d93891
.exe windows:4 windows x86 arch:x86

cfe80136ee2dd4ce7b67dc3020244ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
GetStartupInfoA
GetProcessId
ProcessIdToSessionId
EnumResourceTypesA
ExitProcess
TlsGetValue
TlsAlloc
TlsFree
GetFileType

oleacc

LresultFromObject

user32

LoadCursorW
GetWindowInfo
RegisterClassExW
CreateWindowExW
GetDC
GetUpdateRgn
MessageBoxW
EndDialog

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ