ad2926bb382633128ff37b21d3ae80bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad2926bb382633128ff37b21d3ae80bc_JaffaCakes118
Size

56KB
MD5

ad2926bb382633128ff37b21d3ae80bc
SHA1

20ca3c3f9bafc1f82868895a3f07e4b72d595d88
SHA256

a73a18cbeaa49eee6c33cf82d5e02f65d6491cac8b830f348e71dea314f7226c
SHA512

9336098f9ab6a990f4e80282f1070af52f17270386f6e4d4197ebdffa206b5807502addd5c7afed36216c4eea5624ceb50573ab28ca212c7abda8bea4be4fc94
SSDEEP

768:D8ktMuusgaXFJfZ+GhU+ziJrguV/HYGmXOcC9zpUIKh3aZfEU0cOfN:DHtMlsgEbgG1u4rnCPkqdEpcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad2926bb382633128ff37b21d3ae80bc_JaffaCakes118

Files

ad2926bb382633128ff37b21d3ae80bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE