21f400e29d4ac04f2b8ad90aff8c48b8_JaffaCakes118 | Triage

Sharing

General

Target

21f400e29d4ac04f2b8ad90aff8c48b8_JaffaCakes118
Size

105KB
MD5

21f400e29d4ac04f2b8ad90aff8c48b8
SHA1

e8f47fc855b12605acabd96f59f77863f6ad19a8
SHA256

9ffcb4b6f0eafb2fc26acd02b8b4899e9545ed89263784a315e890878af2e638
SHA512

fa58894ad7f82a567671c3bf9cd55b43ac1716e3cf3093902b79fb82cf6c1bbb89ac39634e9bf839ef85a34494e549b6e2ebab29014485e2c687615b7a6b0e20
SSDEEP

768:G1fsvquCjaP+KCCKBY28eC4v3TLT2gu6kst+0TS8HV4zTVu/nVLLV07:G0qu0ZY2N3TA6kswOS0Vqu/li

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f400e29d4ac04f2b8ad90aff8c48b8_JaffaCakes118

Files

21f400e29d4ac04f2b8ad90aff8c48b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a108f0b76885d57f2cb3471b1f5f9511

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
lstrcmpiA
lstrcatA
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
lstrlenA
HeapDestroy
HeapFree
HeapCreate

user32

ReleaseDC
DestroyWindow
SendMessageA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE