JaffaCakes118_227033f4ec6aacfec8894509bd59ee5d | Triage

Sharing

General

Target

JaffaCakes118_227033f4ec6aacfec8894509bd59ee5d
Size

197KB
MD5

227033f4ec6aacfec8894509bd59ee5d
SHA1

0799d0181a39f19a5079888536e04b7030ad2779
SHA256

b5b3fc53035525d67ecc8964972b49438fd240ee520cffdaf2be555060780819
SHA512

41fa4c712510fff19205d9d2726e6928dca4f24d29706df5cfd96af80fbb1b165d5ea121b709d8914fa2bae3274765cd570aebf4fe347aa35823e03306e62639
SSDEEP

6144:qblACYpDG/C5qN9xXbFgp3ss0clBRF0wM:qblT2aK5qJXh6FrR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_227033f4ec6aacfec8894509bd59ee5d

Files

JaffaCakes118_227033f4ec6aacfec8894509bd59ee5d
.exe windows:4 windows x86 arch:x86

fe00a738b8ae6d439b9de05976ba07a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

FindFirstVolumeA
TlsFree
GetPriorityClass
TlsGetValue
EnumResourceTypesA
InitializeCriticalSection
TlsAlloc
ProcessIdToSessionId
GetStartupInfoA
GetFileType

user32

CreateWindowExW
GetWindowInfo
MessageBoxW
LoadCursorW
GetDC
GetUpdateRgn
RegisterClassExW
EndDialog

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ