01047c772e00112fd591b2e94ff72f07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01047c772e00112fd591b2e94ff72f07_JaffaCakes118
Size

192KB
MD5

01047c772e00112fd591b2e94ff72f07
SHA1

e8fed9208b7d67063e7838974c4087d96702e93e
SHA256

490c40ec86e23f4f5355f40f0e24118b47ed97620ad223f2286645c7dfd70e9e
SHA512

fe949510d5dd5e554e252500671c0b9c25e33fe00163d478ae08895416b8308bbb830338037933ed01c30927abd191575084e6128fee27ba159c58c2644e2693
SSDEEP

3072:VZqq0gPCMzsNa2bdPT6GL71I2wYvTnKYPbCjhE56jhxtGYruxgBYNdnTk4++b/z:Hvzz2t6Gn1I2wYvznbgCoD7qgsbnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01047c772e00112fd591b2e94ff72f07_JaffaCakes118

Files

01047c772e00112fd591b2e94ff72f07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50b1522c0f44feea3c1f3b6d9063be67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

CreateWindowExA
DeleteMenu

gdi32

CreateRectRgn
Rectangle
CreateDCW

oleaut32

GetErrorInfo

msvcrt

_adjust_fdiv
strcmp
_exit
_XcptFilter
exit
_controlfp
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wasdqzi
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE