35da420a85f61683975ccc4e9e410ca6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35da420a85f61683975ccc4e9e410ca6_JaffaCakes118
Size

49KB
MD5

35da420a85f61683975ccc4e9e410ca6
SHA1

1403c5230e51673264c9b35bf9a4fea2882a80e8
SHA256

68ca6b3e4166a3253d4b59c31b5a7ba7d9a5fc21fb5edde574da5c7d7f048e70
SHA512

7bc28ed0b576f3d85aecfc08f4426be043c5fe6e03f46eb877e20924477ab50500cd5849f9220c4d1ce3a1b8951470c5df4e063ee0221a6d79267706cd483fe8
SSDEEP

768:S1GX/j9g1jdbaM0nWBtM6ig29Ht5o3CGPf+AJKjIV06cxMdQtd29AU0k1j8O8qeE:4Mj9gDaRWLwNsCoS6GM2d250kLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35da420a85f61683975ccc4e9e410ca6_JaffaCakes118

Files

35da420a85f61683975ccc4e9e410ca6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE