daaac2979b61da6458b94d8d1b28fd96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daaac2979b61da6458b94d8d1b28fd96_JaffaCakes118
Size

57KB
MD5

daaac2979b61da6458b94d8d1b28fd96
SHA1

5b44d3849592015c2cb610c713fb7459837d678c
SHA256

0f964d3ca81a2b6d72441c1b720e5b2ceb52362a6007958af5a9323a9425be95
SHA512

5d212e55a0bc2c3cd6dc55c19c6bae038e49d3bc22b518feb4df88cd6f6179553353a01dd4b0f379ae448665d34c513a418d53c3c7bcd41eb2b6e792fda2d257
SSDEEP

768:ghgLwL+3YeIQFu46/i/Qzkw3GhigXtvuCGezAm0CU9ASGcBgQE16FQm3x4jzBME+:UXL+ld6i/QzkwUpKeaySGonLGj9iY3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daaac2979b61da6458b94d8d1b28fd96_JaffaCakes118

Files

daaac2979b61da6458b94d8d1b28fd96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE