0ac31ec8e2ddea0cc34327f17a6d0094_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ac31ec8e2ddea0cc34327f17a6d0094_JaffaCakes118
Size

108KB
MD5

0ac31ec8e2ddea0cc34327f17a6d0094
SHA1

89374bb2bef21a1f3e3f9e2cfbf3b2e793af7e4f
SHA256

4b4b9c61daf8e216b4dc8529dbe43359a3ee54fdb0e2327bf0bbf4fd3d3d6098
SHA512

4f8990b48e18053e8ca3e51a652ff66832e03fe2299c19f56c7a7cd14a1adae3796e36711b17eef8da6563928b59410a4afc154e0428642a3a2a7c42db5224d6
SSDEEP

1536:IKTDTZmKVjmb6gBtuEySoPvUW4eVO2ZUcZ0B1d0alq8hYEkaz+jq2dcB4upxacXf:IeDTYK1SoP8W4epUrDog8JW2Q4Y3Lv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ac31ec8e2ddea0cc34327f17a6d0094_JaffaCakes118

Files

0ac31ec8e2ddea0cc34327f17a6d0094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02fd57b308dff749bfd99ab62a93267f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

EnableWindow
IsWindowEnabled
CloseClipboard
DrawTextW
BeginPaint
FindWindowA
DeleteMenu
FillRect

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
strcmp
free
malloc
_exit
_XcptFilter
__p__fmode
_acmdln
exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ