e25469be4c042f3c622fdc8b3bc3f85a_JaffaCakes118 | Triage

Sharing

General

Target

e25469be4c042f3c622fdc8b3bc3f85a_JaffaCakes118
Size

58KB
MD5

e25469be4c042f3c622fdc8b3bc3f85a
SHA1

91e63dbc22f933ad6b924a010c0a1ff86f035780
SHA256

1e1fe23b0ef3ee7745f32fe91e032edbc0ac5ecefaf3f876acee637c2e633409
SHA512

ed568bfba6e5fa3dc28657f5ba3e818bb58c98dca0ee99623f759822afa5bb19fabe1369e841d6477a0f09a3d853160ea370324102aec1171ec7eb6a6f7a178c
SSDEEP

1536:T/U2UsebpIBDCXocs/PZu7r557HlHwXWbVO7AJclwlCB:bUPpuOol/Bor3jNRO7Yclwl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e25469be4c042f3c622fdc8b3bc3f85a_JaffaCakes118

Files

e25469be4c042f3c622fdc8b3bc3f85a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE