5c49bd5164b4abc4e69dd5230c7fdded_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c49bd5164b4abc4e69dd5230c7fdded_JaffaCakes118
Size

58KB
MD5

5c49bd5164b4abc4e69dd5230c7fdded
SHA1

356e375a54972773beeada22d21b0654ea156483
SHA256

38ddfa9bc40d0d20ecb169b07c271a5d8a31a78a90f299892f4261a8f7ef26e1
SHA512

995387bc4192e7546e0c27224eaa246bdbc4ba2e1501b94a4319b98fce5c2986db097be1e319766b28cbf4087dd8e8fb0e1ddbfb70e5c8a249e2383422dcfa01
SSDEEP

1536:5eMafz2T1l1xnf9/56FpvNYgrRI6MSu70+jT+fUOYD:Mhz2Bl1xF/MXjRI7SWPP+cO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c49bd5164b4abc4e69dd5230c7fdded_JaffaCakes118

Files

5c49bd5164b4abc4e69dd5230c7fdded_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE