efe8e37c5ad2f9144a8048b8d449c278_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe8e37c5ad2f9144a8048b8d449c278_JaffaCakes118
Size

56KB
MD5

efe8e37c5ad2f9144a8048b8d449c278
SHA1

7018ec494f75af8e44b3159c05c0452dd860c4c8
SHA256

ef5e1e92cfe16fe8c3546e640e34be4e4aa4777b37deeec25fe48e9e32cdd240
SHA512

2a0ebd4138fc7333462fe30655ae10a7bbb33370a687cfe688755b8c5bc164a035b8c63cca5751186fcf1c2ff2460e52727687d71535cc88ad3dba8f35480a46
SSDEEP

1536:WaC0/uiaUqJ7Q6ep8sU3s0RH3kivL+R0gDLYap7:WaJf+VepW35L6Uap7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe8e37c5ad2f9144a8048b8d449c278_JaffaCakes118

Files

efe8e37c5ad2f9144a8048b8d449c278_JaffaCakes118
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE