067cbdbd53b5436d62b12a7beb3403ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

067cbdbd53b5436d62b12a7beb3403ed_JaffaCakes118
Size

246KB
MD5

067cbdbd53b5436d62b12a7beb3403ed
SHA1

6b43a11c71efa38fde957d9d981d868768521d0a
SHA256

319518c5c738c0bc7586c9cecac42e1ef0de45ba7382d20fdb7645c13c44ca0c
SHA512

1e79e61f851d7ad4aeb9c299bb837727607811a97bd2f5b54db385e155cd58a439617f8425cef9ae5a7896a67e7bc3c5c3813bce4f83a7a2103f02f52e6834e0
SSDEEP

6144:txTh7/Dcw9ZEBzoJMh+ytpuA0KO1z7RQN/zRL45Usmj+bG:5/wKmloK+ytpuA0X1zG1L3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
067cbdbd53b5436d62b12a7beb3403ed_JaffaCakes118

Files

067cbdbd53b5436d62b12a7beb3403ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77aaab8e0251e86609e93fd2a8ef8f44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetFileSize
LoadLibraryA

user32

ChangeDisplaySettingsA
EnableWindow
GetWindowRect
GetDC
DeleteMenu
IsWindowEnabled

gdi32

DeleteObject

oleaut32

SetErrorInfo
CreateErrorInfo

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_strrev

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ