0f5c9cb114bedce04ca25bec8d08d350_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5c9cb114bedce04ca25bec8d08d350_JaffaCakes118
Size

290KB
MD5

0f5c9cb114bedce04ca25bec8d08d350
SHA1

06dceb9524fc970b1affe65d842d703e65bacbd9
SHA256

19ad2afab68498936e20a908c404378a92d5e4be06075e207b053d4a431b90ea
SHA512

c4b889533fa0495af8282cf570fd8b4448f515c936d770b3ea2a8e2e72c2dc805aa515938a508d7ebf2fd4e006bee2e598a0ae0183a22d6e43fd25c837c8f586
SSDEEP

6144:j9kRSX259KfZ/6Bw93MiISZWnRsEQGM6H/ok0rlnZfnALGEmhsap0/pfH:j9pTScHURsELHJpfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5c9cb114bedce04ca25bec8d08d350_JaffaCakes118

Files

0f5c9cb114bedce04ca25bec8d08d350_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb4458fde5c83ee8068b744f0ea91e80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
OpenClipboard
CloseWindow
CreateWindowExA
GetWindowRect
IsWindowEnabled

gdi32

Rectangle
BitBlt

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
_except_handler3
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ