f0f7f09378b4627c28de792d639c8e80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0f7f09378b4627c28de792d639c8e80_JaffaCakes118
Size

27KB
MD5

f0f7f09378b4627c28de792d639c8e80
SHA1

3615965af7963c9953153d04641cec65576f909c
SHA256

8d22ad01c8e0e7540e08f6de0d88e376d9903ea7077ea3b2041baa7abb92adc9
SHA512

1ec4e9806728d2e881314ef99ca57aa889d0843780c5b64ae66510ad89725ff1637fb4fb65ff8e6276068ea650b907621efdb73bf09ec77d707f9c6a3e97ec2e
SSDEEP

384:P2WdT6d0wnVI6OQ6cccccccccccccccccccccccccccccccccccccccccccccccn:P2WdT6qwnVI6OQar7UTyiWyZ5pBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0f7f09378b4627c28de792d639c8e80_JaffaCakes118

Files

f0f7f09378b4627c28de792d639c8e80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85ad78e4e8cb4fd25deaa044aa1a6ae5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
FreeLibrary

gdi32

GetStockObject
CreateFontIndirectA
CreateSolidBrush
GetDeviceCaps
DeleteObject
GetTextExtentPoint32A
SetBkMode

msvcrt

_controlfp
wcslen
_except_handler3
wcstoul
__getmainargs
toupper
__CxxFrameHandler

user32

TranslateMessage
DestroyWindow
EndPaint
BeginPaint
GetWindowRect
GetClientRect
SetWindowTextA
DialogBoxParamA
GetFocus
CreateWindowExA
DefWindowProcA
DispatchMessageA
SetFocus
LoadIconA
GetMessageA
PostQuitMessage
EndDialog
GetSysColor
ScreenToClient
MessageBoxA
ShowWindow

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ