0daef4a65b80fa0edc5720c13cf63f7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0daef4a65b80fa0edc5720c13cf63f7c_JaffaCakes118
Size

204KB
MD5

0daef4a65b80fa0edc5720c13cf63f7c
SHA1

f23b6f2c447e0bd571e40cfbf104b97fc2fd9d76
SHA256

40709769e2dfa72bf43c3232a562f0872f69992d75b24ad4d416d4d401dcd936
SHA512

1a3bd6dca03bc3c22b13f23e8cae02d96e5021b7246f66bce3d91942fd97355d1790d1f5cb3af0f609a229d78cc61918d5e28008f786d6580c1a4e1673d27631
SSDEEP

6144:vjmliIOHkqc6C/e5lJyZG6h9SD7RqzXV1JrQ:MoEqge7c34tQV1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0daef4a65b80fa0edc5720c13cf63f7c_JaffaCakes118

Files

0daef4a65b80fa0edc5720c13cf63f7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3345357651df079d1851b52e3e5424ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
GetDC
GetWindow
EmptyClipboard
CreateWindowExA

gdi32

BitBlt
GetStockObject

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocStringByteLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ