259634044bafa05db8bf9ef4a34cb224_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

259634044bafa05db8bf9ef4a34cb224_JaffaCakes118
Size

180KB
MD5

259634044bafa05db8bf9ef4a34cb224
SHA1

079281b7d99713a57e86f12fb647db8a7d1e242a
SHA256

449baa64620f1cfbe0b920f7eb4a042a82760094531b9c480770deed7b03abd2
SHA512

1c18541ec0eea5325ff6ff9eb7ce95264c5fe96fc50e58cfab0a1a28ac0e830281214b431c9bd38f4c2cc34de79c1c3510e90d24c0f28efa9f1a384723466494
SSDEEP

3072:VsatB1wTI7LN9zr9iLV2X6IUoA4SVYsYByvh+twT6h7mPxJVEyGGMD/heIcN5Fuj:YUnNtkLV2X6IrAdYsYBHtwT6h6PREyn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
259634044bafa05db8bf9ef4a34cb224_JaffaCakes118

Files

259634044bafa05db8bf9ef4a34cb224_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03f76fa42adbdbc735b0007fdeb9b720

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
GetWindowRect
EnableWindow
DefWindowProcA
CloseWindow

gdi32

CreateSolidBrush

oleaut32

SetErrorInfo
CreateErrorInfo

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
__p__fmode
_acmdln
__getmainargs
exit
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ