61e111b57a66581e5a93532f6608f275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61e111b57a66581e5a93532f6608f275_JaffaCakes118
Size

49KB
MD5

61e111b57a66581e5a93532f6608f275
SHA1

003b51b90813eae726b0bc0c2cdd160b6b5fc5ff
SHA256

fb6c65a10de6627ba96e3d1e392dc8ca177ed74f93aea4b5d57f710dbd9f2ce4
SHA512

7992532bc2a245bd5f6dbcccb9b19f3de44ddd14622d348def5a623728356e6e6b140be9c84cb601b8f6772b99c0eb5d1f3152fb2869c5558f18f5c25be663b9
SSDEEP

1536:Z2lhdIWitUbBp3W7CYNjzllCH/cnJcZNHu7:olnHk1zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61e111b57a66581e5a93532f6608f275_JaffaCakes118

Files

61e111b57a66581e5a93532f6608f275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE