2cd33ac9477b865a66a9ca2f589dbbb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd33ac9477b865a66a9ca2f589dbbb0_JaffaCakes118
Size

57KB
MD5

2cd33ac9477b865a66a9ca2f589dbbb0
SHA1

92853cd95950b49b924a978a1572a460301051e4
SHA256

a726c58d93cd38144c6c015d2957a2557edfb257a71bde3906cbd1cd7de30df4
SHA512

2c337b7c98b122d2263c296fe7436a8643171abd2a6ad14077aa1a27fa20042bce851f4a304894ee6b0bf02fcd9352261f3823f7650c5952df8f129e08de2c31
SSDEEP

1536:/1uFrrTA2T2l/8VgbHtVVCxgG6xI/dIbPF9Rz9oXp:/1uFr/c/VCyG2IV0F9RxUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd33ac9477b865a66a9ca2f589dbbb0_JaffaCakes118

Files

2cd33ac9477b865a66a9ca2f589dbbb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE