3df330cf9925b88d69f2130f1d7b699d_JaffaCakes118 | Triage

Sharing

General

Target

3df330cf9925b88d69f2130f1d7b699d_JaffaCakes118
Size

196KB
MD5

3df330cf9925b88d69f2130f1d7b699d
SHA1

ba6491971a1830756ba66522c5b3cd3ffd48c012
SHA256

05b363a1df70ae65c594707c0ed11fb61b26dfa5c614655af9a2a38ecf439747
SHA512

946a07127d22ce39130918e993c182e4307d520858610fdccfa38da35b5e31af991799b28c299c32ca53f54618f8cd84c1e3fab43d2e015f8aea60e4c0fef635
SSDEEP

3072:ytcdLqiGRSfT4LRSeAptEj9/69GvWFbxlvSYZTFTWEojO27ohuXbXljNA:ccdLeSfT4GbEjRAGvUvSYjTeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df330cf9925b88d69f2130f1d7b699d_JaffaCakes118

Files

3df330cf9925b88d69f2130f1d7b699d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcbe64c2205f3ac23685dd118f8ab6ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

GetWindowRect
EnableWindow
FillRect
BeginPaint

gdi32

CreateFontIndirectA

oleaut32

GetErrorInfo
SysAllocStringLen

msvcrt

_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strrev

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nztzvkd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE