23288e665a585ed8411b9a245626cc28_JaffaCakes118 | Triage

Sharing

General

Target

23288e665a585ed8411b9a245626cc28_JaffaCakes118
Size

55KB
MD5

23288e665a585ed8411b9a245626cc28
SHA1

43e63c389a10fb983a67859932fbfa39f996ee16
SHA256

ab62a346d592c203ab254bda5eb638eeac6f408d9c84999b9235d86a104e7b50
SHA512

d0ff3f0323b9543584bbffcd8e1146c458f952ab8ae9d04b918c6dfed4dce9551d72e51e105a67015a3e2a2874707796cc9eeb7d62ca361fa64d66b7e6b4031d
SSDEEP

1536:4sWKB76OG6h9o5rKnMxENFQdQsJMcRAz12kDb/:4ibaeMxENPc01Tf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23288e665a585ed8411b9a245626cc28_JaffaCakes118

Files

23288e665a585ed8411b9a245626cc28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

535ff14c1e7f92c5aa458644ee921a94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
EnableScrollBar
EnableWindow
EndDeferWindowPos
DestroyWindow
LoadCursorFromFileA
OffsetRect
ShowCursor
DestroyCaret
CreateCursor
CloseWindow
IsCharUpperA
CharUpperA

kernel32

LocalAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE