f13e3461ded18f702ccfb1d632636fec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f13e3461ded18f702ccfb1d632636fec_JaffaCakes118
Size

148KB
MD5

f13e3461ded18f702ccfb1d632636fec
SHA1

2adfd9deba6982555c0adb557b0a08a402400609
SHA256

5a07090067d8068eb98347e443387b2a311c855a92f3d00268c5a0b981c0cd01
SHA512

b6fb627d976c9812a33031064a5b2f12079eac9929c2f7a3eeef80ad7839517a0b4f5500dcaa0b960cffebb7028de5472c82301a841a75917ec83b4cb2d51f65
SSDEEP

3072:d/npKmsXDZF7bEpEu3WeOsfTo9IeO3UrsGh5dC:d/lYZFXEmu39dU4M5fA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f13e3461ded18f702ccfb1d632636fec_JaffaCakes118

Files

f13e3461ded18f702ccfb1d632636fec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d06686cf9c0c76b9d240e8d63fcf19c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

EnableWindow
DefWindowProcW

gdi32

CombineRgn
CreateFontIndirectA
CreateRoundRectRgn
CreateDCW
CreateCompatibleBitmap
CreateRectRgn
BitBlt

msvcrt

__p__commode
strcmp
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ