894d3334fc3e3b36422fa89f850bc3da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

894d3334fc3e3b36422fa89f850bc3da_JaffaCakes118
Size

45KB
MD5

894d3334fc3e3b36422fa89f850bc3da
SHA1

925639ea6dadd73c54cca3b54508805bf07bad70
SHA256

8660f28d91feb2b8eacd5498856aa20346e101323294362e43762d1237f5a6f0
SHA512

44dde0856200ce1f987a2f7fe7c2c95ec01e354fd64f66726c9ac98508d63fc48b538d8b7c063313866a20abc5bdf07473966bea804100eb5f96746d61d1c7ef
SSDEEP

768:oA2zDMb536rNwv3cfIPOUezZJPS/rkMQqZC5C/SvLUJ6xv12JNi1+E5:oAjbsrOEfdUelJPS/rklkOLDxN2JO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
894d3334fc3e3b36422fa89f850bc3da_JaffaCakes118

Files

894d3334fc3e3b36422fa89f850bc3da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE