0e80253253415d821786d356bb0e4ac5_JaffaCakes118 | Triage

Sharing

General

Target

0e80253253415d821786d356bb0e4ac5_JaffaCakes118
Size

59KB
MD5

0e80253253415d821786d356bb0e4ac5
SHA1

b33c438f6ea645767b76b3fd441cf0d5f24c9eb2
SHA256

2c65d67662ccaaad96c1d63ac594194e06dfd45710553fb1b41540bfc7b8b20c
SHA512

f5fa57b66b63e5a0c3450153182d78f3512f207d67abedf82ae707ad2a73775a81954ed11fa02f5df4cdaef3893a6740dff14f8b6701b88d7ed5c54c88d6a20a
SSDEEP

1536:u0U7DINCQOJpV1Eg/cWdtHWA5xiZbViFObWGRqFD:utINOrnEg/jtHWIQFbdS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e80253253415d821786d356bb0e4ac5_JaffaCakes118

Files

0e80253253415d821786d356bb0e4ac5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE