JaffaCakes118_793847374ff8c89cc18d2d134a4bdc03 | Triage

Sharing

General

Target

JaffaCakes118_793847374ff8c89cc18d2d134a4bdc03
Size

174KB
MD5

793847374ff8c89cc18d2d134a4bdc03
SHA1

0d93168e6986b3c170f048a50ac516660e0d1687
SHA256

0f295c2b1034d2763dee3ae0ac25ac3397460a246211f57dc457670a3c7a359b
SHA512

e6b65504f4f82398102e01bff4ff6ccb4dd60f58794fb42821835a97810443ea3166c358914a483649bdc7d5e20ce302ba60e24752e13e9d5852a7b9d8fdf4ef
SSDEEP

3072:DqxGV5XzHsBHS3lv31O5+0PWXr75FeuMy7ZtwibD4Ao9oct1Plpgu74+xapey:D55XTsBHS1v31W+0eX35Wo4iv4AoSelq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_793847374ff8c89cc18d2d134a4bdc03

Files

JaffaCakes118_793847374ff8c89cc18d2d134a4bdc03
.exe windows:4 windows x86 arch:x86

46b08ef01cec8c69bff2f8783e6e9b60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetWindowInfo
MessageBoxW

kernel32

CreateTapePartition
ExitProcess
ClearCommError
GetModuleHandleA
EnumResourceNamesA
ExitProcess
LCMapStringA
GetCPInfo
LCMapStringW
GetProcAddress

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ