1624693dc1dae48bfca9873fd6fa057e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1624693dc1dae48bfca9873fd6fa057e_JaffaCakes118
Size

230KB
MD5

1624693dc1dae48bfca9873fd6fa057e
SHA1

f38227186e9502afc26af25c8cf16443996a71ee
SHA256

48dd6c093568a19830e2cc101270e0ebdc451cfff5141c0fdd5e268c3d9940cc
SHA512

ea28c5acdbfeb49ba2ee26cccda8b71f68b002952134c929ce11688d2e3dc3ef59dbbecce4ca2506587301e266bdebc55c974883c4bc01bc026d37fc7e921cd7
SSDEEP

6144:M3zucUvC7mO86TqpsFiVd9+0mhGgBxBxijjObFy7d:ezupKwxsFi9RmHxijjgFmd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1624693dc1dae48bfca9873fd6fa057e_JaffaCakes118

Files

1624693dc1dae48bfca9873fd6fa057e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a18fe554ee9127eaf6b677882cdeeb74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetFileSize
LoadLibraryA

user32

EnableWindow
GetWindowRect
SetClipboardData
CreateWindowExW

gdi32

GetStockObject

oleaut32

SafeArrayCreate
CreateErrorInfo
SetErrorInfo
SysAllocStringByteLen
GetErrorInfo

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_strrev

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ