271d3207510bf0fb71d421e265b10210_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

271d3207510bf0fb71d421e265b10210_JaffaCakes118
Size

84KB
MD5

271d3207510bf0fb71d421e265b10210
SHA1

0a55c520e5b7e261883489fca3590c62aa4e9265
SHA256

d98ecdb1f0159162ee856aaed2e511d8e06074e48ccb849712588ca84c4fafe4
SHA512

a4092c539aa94459f22cd4d6e32204db1d83efc8ff0899443e669912881f58cc794042af80dd8bbfb119d49b4e2ae2dfa4fce6f6a4e23244dc4cefff52c4e4e4
SSDEEP

1536:D/HgXF5bFuSbAFxp4AQMuxfUhdzKMpZ3pSuTnRWWEuAKF/:bgvAMAFxhuxedOMpTIWLA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
271d3207510bf0fb71d421e265b10210_JaffaCakes118

Files

271d3207510bf0fb71d421e265b10210_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd1eed03e9da4acdb10110e60279784c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

FillRect
GetWindowRect

msvcrt

_adjust_fdiv
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_initterm
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ