0d71a5ad584bfbc924d816f50c86becb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d71a5ad584bfbc924d816f50c86becb_JaffaCakes118
Size

57KB
MD5

0d71a5ad584bfbc924d816f50c86becb
SHA1

763ad77ece19ab9f487112a94ee82f1b0b52634c
SHA256

2ba3794cb24bb4f8cc78ec7a00ea7ff744e6db342d43dc9490187840b940a54c
SHA512

ca3c36bff413b0082eb5d4a2ea97e52313bdc50424663ac05066b675f7c56338918487436571960590bfe7abf872ea1f4c96381079a3dfe1eee22b4811ec849d
SSDEEP

1536:l6qZ6rH+X982x/jFWTccc7A70rouIzOUgLXJ:L0rH+X98oMc7AiouCOUgLXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d71a5ad584bfbc924d816f50c86becb_JaffaCakes118

Files

0d71a5ad584bfbc924d816f50c86becb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE