17209995bd7a90cadefd84db02d8a12f_JaffaCakes118 | Triage

Sharing

General

Target

17209995bd7a90cadefd84db02d8a12f_JaffaCakes118
Size

156KB
MD5

17209995bd7a90cadefd84db02d8a12f
SHA1

754e592db514634216a09b9eb4d197f4097755bc
SHA256

34872545f0dd9a14ccee411db42a414a6dbaaa029db731d48a2396fc01e6617f
SHA512

68b169c2fd407e80f84ab4eb701a9a9b82df6e5b00d0eff779e323a8aba1aad62a14f43406fabe20978b18e83a454646573226ecb8a805b1396ba27802777dc6
SSDEEP

3072:s49tnC3fQTRVoKPdCHY5PZ9ymQr4tC/xfRp0UTaKgEA:ltCZ2CHY5PKd/xfRp0UTaKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17209995bd7a90cadefd84db02d8a12f_JaffaCakes118

Files

17209995bd7a90cadefd84db02d8a12f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b892db396d3a5d02714f44dcf802725d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetVersionExA

user32

SetWindowPos

gdi32

Rectangle
BitBlt

msvcrt

strcmp
free
memmove
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ