2eb8a271af7c09828babdf3d028d127f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb8a271af7c09828babdf3d028d127f_JaffaCakes118
Size

204KB
MD5

2eb8a271af7c09828babdf3d028d127f
SHA1

0f2d427d07031aa6a64aca8c716346ca0cd411a4
SHA256

3a8bd3a79bacecbec08c1589a278539b772a78c994a1fde29ebb9f94d50a1bff
SHA512

9e6cdab11bee7376215a25fb5e521a4dc5258903f35d321fcc996b7d9683f49cb7e030e2affb6e20cc7c7a161ae899e621678d491ef626b437e7a117b2343d3f
SSDEEP

6144:8blH1J1+cLIY9e5lmyZr6W9kD7RqzXV1JrQ:qVT+Qe7isutQV1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb8a271af7c09828babdf3d028d127f_JaffaCakes118

Files

2eb8a271af7c09828babdf3d028d127f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3345357651df079d1851b52e3e5424ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
GetDC
GetWindow
EmptyClipboard
CreateWindowExA

gdi32

BitBlt
GetStockObject

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocStringByteLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE