2784ecc2f1dd890238115a86c1c08688_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2784ecc2f1dd890238115a86c1c08688_JaffaCakes118
Size

311KB
MD5

2784ecc2f1dd890238115a86c1c08688
SHA1

1d3d008a4e424e5b034233135e29ef529e6df93a
SHA256

2b565bfb54163ea8de9941b144b678467044fd2762987aa5607d0351fc0830f2
SHA512

6862426d24f9922500603755d64d546ccb6f782ffee39c2dd321a20fadb6e3b1fc094d84d4a0eda35d45926b2cde67ea02911cb85ba1f9ca1194c2608d2f57cb
SSDEEP

6144:j9kRSX259KfZ/6Bw93MiISZWnRsEQGMa0fOjC7AlIyUisn:j9pTScHURsEdAwIyH4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2784ecc2f1dd890238115a86c1c08688_JaffaCakes118

Files

2784ecc2f1dd890238115a86c1c08688_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb4458fde5c83ee8068b744f0ea91e80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
OpenClipboard
CloseWindow
CreateWindowExA
GetWindowRect
IsWindowEnabled

gdi32

Rectangle
BitBlt

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
_except_handler3
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ