2c17b9c46604ee950b6dfeb3e362ee8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c17b9c46604ee950b6dfeb3e362ee8a_JaffaCakes118
Size

58KB
MD5

2c17b9c46604ee950b6dfeb3e362ee8a
SHA1

acf08392e1dd3e43c4905ecea010c60bab1b7c24
SHA256

fa1379c960ed823a4af251729df40ce5d9e594219a2c67809f73e082776746c9
SHA512

a7beb4f75219855dfc5d3b37f79ef55664cbc00e4cd140b0164737bc2b981538f8eff01ef694966a1814883e0a8bcfab38e00eb89eeb61190dcc0a15ff343057
SSDEEP

1536:ekZURvxlDPsYi/cR5kStOJcPB6wnfbsPB+1PvyCYGO:xKH7sp/2xB6sSO5YG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c17b9c46604ee950b6dfeb3e362ee8a_JaffaCakes118

Files

2c17b9c46604ee950b6dfeb3e362ee8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE