3119fbc290eaeb855601963c5e9fc2da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3119fbc290eaeb855601963c5e9fc2da_JaffaCakes118
Size

59KB
MD5

3119fbc290eaeb855601963c5e9fc2da
SHA1

1138c7c35252ad45194884ff3e45f5e3e618807a
SHA256

20c6260ba992ea0282133ab6ac785a83d19d00825976f3b3222f128b01b57299
SHA512

fb4fe01ee851e7bf64895a3f7ed82f33b8b6d76699f3b55d5d04ae7870a9816613e880d7d5fe2c7058becca93c57fa0942e646ade24f64b3fe45f52409637b48
SSDEEP

1536:ZicVwLp8yGHYzD+PMCo/3qJ9R2vp3ZR39JpUW7qXtj9fg2UixTgP:4eU8LYuPMCo/3qJ9Rm3ZR3dYtj9I2Hxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3119fbc290eaeb855601963c5e9fc2da_JaffaCakes118

Files

3119fbc290eaeb855601963c5e9fc2da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE