2136c43d8a3cba731e37759da0f8b122_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2136c43d8a3cba731e37759da0f8b122_JaffaCakes118
Size

148KB
MD5

2136c43d8a3cba731e37759da0f8b122
SHA1

30bca0da965e7548e08cf701a155fd468758218f
SHA256

c50519c798c308f481e3a5cf484032e5e5bbf3920215f280dc650538e917c69b
SHA512

4ab30d9c842db5d8b5119f5991ed8e686b74da70dec49e7970390a09c8aac318623187d4a6a7b54b772baf2dbaf0b6a15636aee7e6ca273c9e5d0f75edd652d5
SSDEEP

3072:K/nQ3COlNUAR2NtA8tPWKkF4TxZB43vepbc1g/sGh5dz:K/oCaUBbA8+4ZBw6bOC5fh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2136c43d8a3cba731e37759da0f8b122_JaffaCakes118

Files

2136c43d8a3cba731e37759da0f8b122_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d06686cf9c0c76b9d240e8d63fcf19c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

EnableWindow
DefWindowProcW

gdi32

CombineRgn
CreateFontIndirectA
CreateRoundRectRgn
CreateDCW
CreateCompatibleBitmap
CreateRectRgn
BitBlt

msvcrt

__p__commode
strcmp
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE