f9dbcb56ee6076945140970d748e9abc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9dbcb56ee6076945140970d748e9abc_JaffaCakes118
Size

58KB
MD5

f9dbcb56ee6076945140970d748e9abc
SHA1

e363f121fed6aa01ad51fdc69f76c8229f2178fe
SHA256

573819474e4c8172a3db150b251cc42ae754cb362d9144afba47b22a1c8a4a66
SHA512

508e4f82e50479346d0dfa6380ce9c1d2ea6f5631e8f868df92cf2ee31dc20c42fe558881391f15b60ecd3be829a9d6de483e8d7cc828864441d5d9d8b75fb4e
SSDEEP

1536:UBNVoKF3sCq7eMzPN/6GQWKt8BC/lU9FrZ9:U7fF3sCq7HF/6GQHt8elU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9dbcb56ee6076945140970d748e9abc_JaffaCakes118

Files

f9dbcb56ee6076945140970d748e9abc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE