886d48cf4e070a4a5e8c74c1cde378b2_JaffaCakes118 | Triage

Sharing

General

Target

886d48cf4e070a4a5e8c74c1cde378b2_JaffaCakes118
Size

58KB
MD5

886d48cf4e070a4a5e8c74c1cde378b2
SHA1

01bbf06c5b0b72333e20faf2fe87fdc9106c8675
SHA256

3c9b9978d91a956d018d1ca97282a34d7c27631e45203858dfbb3da796ea6dba
SHA512

0a4605cb9365074e904cc6301e8bfaec5ccf8bf99584304668a3b247b1aae210f1338d52383d55d91df60dafe6eb1d3fb414f73bbdb1df804d0545e7f83c8126
SSDEEP

1536:cHb3uKbTiUEUOVP/y4x861H5h69IqI5wU/hyhi:c73uKniUROVP/lv1u9IqSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886d48cf4e070a4a5e8c74c1cde378b2_JaffaCakes118

Files

886d48cf4e070a4a5e8c74c1cde378b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE