157c3dac128d4e05e68453b1b39431a2_JaffaCakes118 | Triage

Sharing

General

Target

157c3dac128d4e05e68453b1b39431a2_JaffaCakes118
Size

140KB
MD5

157c3dac128d4e05e68453b1b39431a2
SHA1

da04ffa9fefef7f8391c5ae8a13c38890cdf96cd
SHA256

4934153ddb6f0b2aa5a453c2127bbea2b12568b5887d338bdb280a97e80aad4e
SHA512

74dc799e0087e71f72c9f6f7c7ffce6233e134385a44e793d3c729cc58ee36e4d542a6d55b317796f8c713892befe081ff53b90bfc2a9f3a45ac8ae5d5ab2821
SSDEEP

3072:tNNq0VaCTpnKn9dVczQ4Y5iL0fDIuyNCeAPFI4iTMIqY5l7L34:P4K9To/VczQ4mfDuNRAPGXTMIb5l7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
157c3dac128d4e05e68453b1b39431a2_JaffaCakes118

Files

157c3dac128d4e05e68453b1b39431a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2bc77645615a4dee3946d70a2144649

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

ChangeDisplaySettingsW
DrawTextW
DestroyWindow
GetWindowRect
CreateWindowExW
EnableWindow

gdi32

BitBlt
CreateFontIndirectW

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
_except_handler3
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gygjfrt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE