c1e837667b649aeeecacc83cdb3fa4eb_JaffaCakes118 | Triage

Sharing

General

Target

c1e837667b649aeeecacc83cdb3fa4eb_JaffaCakes118
Size

58KB
MD5

c1e837667b649aeeecacc83cdb3fa4eb
SHA1

91ee5162ef71d3a245d4040df15949c227a21537
SHA256

881c0b817db06fd606d3fd8f617900a4bea7479007715b56f90f52bf38c5f7a3
SHA512

66f2885239bf23bb6160afce85e472e0d5fa0b40f324627907ba6f4e695b054846f808b3deed07e2eaaa428227ca2ddda1a5d46e45a781283b5c00c1fe04ae05
SSDEEP

1536:aLeXcmDiv5UG9JmM0Le/oPvI7HFn6XZlDmvZS6PGWHNJWgcUZSl:ami/0A/oIrFqZlDuZZ+WNJWCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e837667b649aeeecacc83cdb3fa4eb_JaffaCakes118

Files

c1e837667b649aeeecacc83cdb3fa4eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE