87f3b8f8bdb4ad5eeeccb3ade7fc8575_JaffaCakes118 | Triage

Sharing

General

Target

87f3b8f8bdb4ad5eeeccb3ade7fc8575_JaffaCakes118
Size

58KB
MD5

87f3b8f8bdb4ad5eeeccb3ade7fc8575
SHA1

5687543ae40af90ac8dede3ed217a65b539a3701
SHA256

e9aa6d780276771a002ed480f6a19759f107a31f4eb77c56ff45b2f6e2bb0c1f
SHA512

08b9c46db3cc1f12d35cded44b056a86f3c5cbfdd9f80dd163169405cb965b653e7e5b9c55b9fac18c2aa4e82165d6190f44f0d957ea9f5ffe55b89863842bf8
SSDEEP

1536:rSSR4iAMc/wCO/1Wa9sILkebV3BA02ymvqAj+CiB7vd:rS6NF2O/1x9s6AByZR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87f3b8f8bdb4ad5eeeccb3ade7fc8575_JaffaCakes118

Files

87f3b8f8bdb4ad5eeeccb3ade7fc8575_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE