4a43e73e0eb8e383e10cbc3be5d20bf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a43e73e0eb8e383e10cbc3be5d20bf5_JaffaCakes118
Size

56KB
MD5

4a43e73e0eb8e383e10cbc3be5d20bf5
SHA1

c20c9b693c7cf14a0e4b2f88cac754ccc01b894d
SHA256

504377640f538e864cf156a887c5786b2e93bdfcb9ebf080aee9f270beb054c8
SHA512

5a557a3169e6941f4e67ffae39dfe0fc69558ae103eeabe35fd1ee00e69e57702d9f1d3d187fb833637c301ebe1ee112f99a745489e62099b1772e360fe6966b
SSDEEP

1536:vOtnjCb6W7FqEOj2WrT1t8jKk+0eZ7x6lJ16m:vOtjCP7FqEGpoKdvjar6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a43e73e0eb8e383e10cbc3be5d20bf5_JaffaCakes118

Files

4a43e73e0eb8e383e10cbc3be5d20bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE