3eb5a004a0b497e40a173c5209a4ce47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eb5a004a0b497e40a173c5209a4ce47_JaffaCakes118
Size

204KB
MD5

3eb5a004a0b497e40a173c5209a4ce47
SHA1

7eb868243a9cb83cab248672c7e46207fa0e4065
SHA256

2f0d45e928a21b343409f79bf2c3d664f640e4d7dedfadb61811168d5c74070e
SHA512

1f6f64cd480662026209f94b89efdc4e240a8be0cb8cb48de31ceb54ecfafb7ea2da71f0eca713c6c2ea4bee64ca143d3dfe1df3b0b41fc7e9d910ca6dc01320
SSDEEP

6144:ublH1J1+cLIle5lmyZr6W9kD7RqzXV1JrQ:cVT+ze7isutQV1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb5a004a0b497e40a173c5209a4ce47_JaffaCakes118

Files

3eb5a004a0b497e40a173c5209a4ce47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3345357651df079d1851b52e3e5424ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
GetDC
GetWindow
EmptyClipboard
CreateWindowExA

gdi32

BitBlt
GetStockObject

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocStringByteLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE