3c68abc18d84feec06113ee9de244093_JaffaCakes118 | Triage

Sharing

General

Target

3c68abc18d84feec06113ee9de244093_JaffaCakes118
Size

57KB
MD5

3c68abc18d84feec06113ee9de244093
SHA1

7a34afd8e4d7be79c3394a8ff11121ee4d81a362
SHA256

7b98a8d79d6951b5e051011f63ef322ac91e14f016f8c8ce4c086de0cfcf6265
SHA512

17b0e1fdee7ad5f1e900219c3e00b14816f5a3b5fee79e142453910c0ecc8b0837ce3d622fceafab0962f9e7458130e832bea0d45fea1d519e592f8d9b42f3c1
SSDEEP

1536:aNRtZtEkQFA4q3OQ15/5bgUCMVDTY+Hy2:JkyA4q3v15xbDNY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c68abc18d84feec06113ee9de244093_JaffaCakes118

Files

3c68abc18d84feec06113ee9de244093_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE