f1f4231b1f7ae7f14d67c004fca64e7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1f4231b1f7ae7f14d67c004fca64e7e_JaffaCakes118
Size

371KB
MD5

f1f4231b1f7ae7f14d67c004fca64e7e
SHA1

f57bf4f0f54f650d87930806ad6fe9ac6556b094
SHA256

c18cf02492ba15d287a691884adc5f1970b09fd964dfe1ec7d6a3ba868ec75c0
SHA512

4060ca629bcb953e34b2a4201a4bfb5e86a2c824a1d41287205c12f95a5653ef091a713fe3dc26a31eedfc4f854b51d4bd0b0ebc70df1dfff6147987bff3f397
SSDEEP

6144:aKg/X/SisiZMVHfCmBjMo1pPCID7GS/UrQTv5SZ+l/n6myILCJyFcncMGf2Ig:K/X7fM/C61pPCo7t/QqBSE6myILyyiL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1f4231b1f7ae7f14d67c004fca64e7e_JaffaCakes118

Files

f1f4231b1f7ae7f14d67c004fca64e7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

512d7bef8a8b3a26e3aafecfca12ba3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
FreeLibrary
Sleep
GetVersionExA
GlobalFree
lstrlenA
LocalFree
GetCommandLineA
CreateEventA
GetModuleHandleA

gdi32

CreateSolidBrush
ExtTextOutA
SetROP2
SetBkMode
GetTextColor

msvcrt

_exit
_adjust_fdiv
__getmainargs
toupper
_controlfp
__set_app_type
_XcptFilter
__p__fmode
__setusermatherr
_initterm
__CxxFrameHandler

user32

LoadIconA
EndPaint
PostQuitMessage
EndDialog
ShowWindow
DefWindowProcA
GetMessageA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 361KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ