b6bfff21c2e7b9bf7e7fccc35710b8ee_JaffaCakes118 | Triage

Sharing

General

Target

b6bfff21c2e7b9bf7e7fccc35710b8ee_JaffaCakes118
Size

57KB
MD5

b6bfff21c2e7b9bf7e7fccc35710b8ee
SHA1

7e2a5ff38a599331db610381d31780d6db4fc02c
SHA256

55788facf50bd7a3e9ca1997faf860c7a49615c123f3743007c84390298fd4bc
SHA512

fdb08653d952482c39c3de8150f7d2879eb4c4598e6b7c711f7bb2b0bf9977b049e47b463b6d7a0795fd2ff8daf82ac572a7cf34a0556566ccec4651f09862af
SSDEEP

1536:xbNmNQyNLmLwRaqvpLc4Qz2y5HZhZ11Pr:K7LNkGe+y5f1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bfff21c2e7b9bf7e7fccc35710b8ee_JaffaCakes118

Files

b6bfff21c2e7b9bf7e7fccc35710b8ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE