230a0ed2359b4dd4b7c4693f65bc2579_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

230a0ed2359b4dd4b7c4693f65bc2579_JaffaCakes118
Size

695KB
MD5

230a0ed2359b4dd4b7c4693f65bc2579
SHA1

1464597fe990b67373b12d46eab933c7d1936dc8
SHA256

909adac1cd6e3adfbddbe3bb573710e6dc45549e3c840f1d788a61bb19ad41ea
SHA512

e184214911fc02fc798cbffa98557b8a62e7e88109c21d07524cbee3bca6889476ba52df84db5835044ce91a6ad73fc7eac9a0732141d9c300b93d3562cb18b7
SSDEEP

12288:jcUk9EIdjJ28OssuZWj1W1v2xehk0Xrj1kRiWuoe6p2d/NegBKB:jc9Ldl28OssuZkW1v2xwk0bZkEWJrGen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230a0ed2359b4dd4b7c4693f65bc2579_JaffaCakes118

Files

230a0ed2359b4dd4b7c4693f65bc2579_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f75168d64597984c5fdae1cdd5162476

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
LocalAlloc
GetCommandLineA
LocalFree
GetModuleHandleA
GetStartupInfoA
Sleep
lstrlenA
lstrcpyA
CreateEventA
GetTickCount

msvcrt

_exit
exit
wcstoul
memmove
_c_exit
__p__commode
_XcptFilter
__CxxFrameHandler

gdi32

GetObjectA
MoveToEx
GetTextColor
GetStockObject
GetTextExtentPoint32A
CreateFontIndirectA
BitBlt
ExtTextOutA
GetBkColor
DeleteObject
GetPixel
SetBkMode
SelectObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 673KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ