1a67ba6e2f1405f526eb90b74db96984_JaffaCakes118 | Triage

Sharing

General

Target

1a67ba6e2f1405f526eb90b74db96984_JaffaCakes118
Size

58KB
MD5

1a67ba6e2f1405f526eb90b74db96984
SHA1

a3b3e6430cf9b77a3a5e4251b368682ef709b112
SHA256

58fce25d52c7f8fd3f91a95887bd073a7182245d18040f205bc2c61ea0e9adc8
SHA512

da9b2069e21fff41918a4c09574d09f2b0da72fb6bdbcf7dfeb4ecc6bed0dcf21b29713257530e9e6ea10f944a8297de9f799595075912f106321b2ea1244a91
SSDEEP

1536:3mtcKfdoS+ehi/jEWFEdieXuh9Ufey6SPhyTNfOZrTS:WtcKfzm/IWFEUUuh9ueyJyTNfgv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a67ba6e2f1405f526eb90b74db96984_JaffaCakes118

Files

1a67ba6e2f1405f526eb90b74db96984_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE