073f762bcc973bb9575722d0ffa46df9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

073f762bcc973bb9575722d0ffa46df9_JaffaCakes118
Size

58KB
MD5

073f762bcc973bb9575722d0ffa46df9
SHA1

de7e10e85874db64def2b513c3e5025a0e282208
SHA256

5f1263729996554cc2e3a4bfbdc09ab972870f05f6d104ec6c8c1866fd45661a
SHA512

7370404334be7e26e060a48772a8cef4e228a37956e9779f8f34eed8da60d9e4bdec5a6a3091f5d99f6ba93787f028ee6ffe31955e6e5a6cc97f3c229134579f
SSDEEP

1536:Nu7KEWOi/ywTNS/Ww9Ah5AEOSs+XBYGL0jgmf:DEEqiw/WKs5AVy2Gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
073f762bcc973bb9575722d0ffa46df9_JaffaCakes118

Files

073f762bcc973bb9575722d0ffa46df9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE