78a0e3ada5be7deea3a690a627f3af67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a0e3ada5be7deea3a690a627f3af67_JaffaCakes118
Size

57KB
MD5

78a0e3ada5be7deea3a690a627f3af67
SHA1

20c06a31326fad64a6b1578a615f6e44c7aec0b9
SHA256

b3fd1a7dbc9c88023295e229a84ace761bacd90208b04922cacc7c27366664ae
SHA512

92ed2ca70bcc0138f3a9fcabcc362e8b708f785554d8a387a78002199391f2eda309eb3c9095c02d140cfc6548137823f4dcd8f3a3f8deef60cf5a7a689af9ca
SSDEEP

768:J1g8vg+6UuYjkT3rVrLLGr9dGlD4Jc9MOn5L+xQQUsdcm5biKPFP4IBreX:7gxjURATBY9dGQc9MOnhg0E9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a0e3ada5be7deea3a690a627f3af67_JaffaCakes118

Files

78a0e3ada5be7deea3a690a627f3af67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE