2838de4ba51a06219bd42b7ef7771bbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2838de4ba51a06219bd42b7ef7771bbb_JaffaCakes118
Size

57KB
MD5

2838de4ba51a06219bd42b7ef7771bbb
SHA1

2e3ec5a7b3726fd7400c5a28770b26adfaa56175
SHA256

d0f5760e199874363b3d4dabd4ba3eb13e71cd2bd79f5b2395ae6357b9f2b6eb
SHA512

9d362e771dfdedeb4896a063244e3cfabe7b032ba1fd590ec4e5fb568b4eb90e61648d3536a798fb9498f382119aa2c3dde93563f9cb1d4245b619cadb73fe2e
SSDEEP

768:8PqwTFD5T3RUprmoPImfvhwxuJjVAd538GnloNh:8PpD5ormcuum37mh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2838de4ba51a06219bd42b7ef7771bbb_JaffaCakes118

Files

2838de4ba51a06219bd42b7ef7771bbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e0305cc792893f430ad97b0ab1a7886b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
EnumResourceLanguagesW

user32

LoadBitmapA
GetQueueStatus

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ