39a0436fef01e65959ffc67a5b03a822_JaffaCakes118 | Triage

Sharing

General

Target

39a0436fef01e65959ffc67a5b03a822_JaffaCakes118
Size

1.1MB
MD5

39a0436fef01e65959ffc67a5b03a822
SHA1

dc9faaab0abf85ed5b611147cea9337dd12a69ea
SHA256

18569957fcf5fc3b476be8f6986023705ec2b7eb9bd32c3f27cedf1ee8e6d1a5
SHA512

a7e2cd3f839819263d4f7686b69fd0d5e944ca79bbc7762bf652ac654872e49981646f6f3afd8121e4d4891c5e478ae12a5f9aa4cfc06989025d7719f59a1904
SSDEEP

24576:WKHLDwx3HbbWaWNa4wcL7OYVfGVlDppaLB+jAhyk:WKe3HbbWaWNa4wczGVlDDaNJhyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a0436fef01e65959ffc67a5b03a822_JaffaCakes118

Files

39a0436fef01e65959ffc67a5b03a822_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdfd3a6de5201082d5623aa2ef65eea3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
GetLastError
FindResourceA
LocalFree
_lclose
_lwrite
LocalAlloc
_lcreat
Sleep
WaitForSingleObject
CreateProcessA
lstrcatA
lstrcpyA
DeleteFileA
GetTempPathA
LeaveCriticalSection
SizeofResource
GetCurrentThreadId
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetModuleHandleA
GetStartupInfoA
ExitProcess
GetCommandLineA
HeapFree
EnterCriticalSection
LockResource

user32

LoadCursorA
DefWindowProcA
CharNextA
SetCursor
DestroyWindow

ole32

CoInitialize
CoUninitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 305B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ