bf7877a8fcfc126c0ab81ad406d471ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7877a8fcfc126c0ab81ad406d471ff_JaffaCakes118
Size

45KB
MD5

bf7877a8fcfc126c0ab81ad406d471ff
SHA1

0ed75c820fc5430903ff686d794bcd3777192f0e
SHA256

71bacbbac0b81fa691d999daa10e0a79b15cef1a2ff014b1c8b19211ceaa08b6
SHA512

f7d9a37c3330a3687f85400af51c9c924e2a93927f477deeeca5ecb50b1f7fb5a80575af8575c671fed08fbfbb20961a4af0757299bf0ff68a2df0f22944ca4c
SSDEEP

768:bL4Fv4T0DrEZoTw9vBQn2UR8lIG2KTev2JTzBWBCDBqLDKMYV7CIMDe:ygT0LThn2XlIG28TuCD8LD5YVmDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7877a8fcfc126c0ab81ad406d471ff_JaffaCakes118

Files

bf7877a8fcfc126c0ab81ad406d471ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE