2f843d35570103618f358304742b9657_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f843d35570103618f358304742b9657_JaffaCakes118
Size

140KB
MD5

2f843d35570103618f358304742b9657
SHA1

ad7e8040654d33133ce9f9d71372c3154812c825
SHA256

250b765bf59aecb8b5c9ab15d0300d7486004bec889d0c7f2339cb0986f85afe
SHA512

d96e17487edf289f0e1a254054096a188738be135cb2357371c6ce10fdfac8463bc586b93233c42121fc1e34e59a5d66e85739c6e7f018e16bc7e936e7da8a63
SSDEEP

3072:dRXBaBAYOmsXteW6wF3yMwHbrWL7JDkou8EwytpAB0xw:dRXgBAYOmSt97ZybSL79kP8EwoqSa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f843d35570103618f358304742b9657_JaffaCakes118

Files

2f843d35570103618f358304742b9657_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e4eab8614951350265367e5fa703a0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

GetWindowRect
EnableWindow
FillRect
CloseClipboard
CreateWindowExA
CloseWindow

gdi32

BitBlt

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
exit
_except_handler3
__getmainargs
_initterm
_acmdln
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ