3fbe5676212dd4fb75b27e604e65f22b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fbe5676212dd4fb75b27e604e65f22b_JaffaCakes118
Size

200KB
MD5

3fbe5676212dd4fb75b27e604e65f22b
SHA1

b040456a0bddf83300386779e4ec32768f074a27
SHA256

dae65243f83202670344944a8068d2af90466b4ac63c54e363b5ae9ebbb45aa0
SHA512

682ea82a4047403fc4610b9a185d752fede48f5e4718b3a1c73f161a1bc8777fa6c495cc582b66b578be378c91c5c0580eb335935b4f82b74928a4bf57af0a10
SSDEEP

6144:cnoK+2p8PW+MioJzQuZMi5ui6EgDlwJrJ:woT++qJ0uZj5RE6j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fbe5676212dd4fb75b27e604e65f22b_JaffaCakes118

Files

3fbe5676212dd4fb75b27e604e65f22b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c70c57bc1353769826bf010a73be84e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

BeginPaint
CloseClipboard
CloseWindow
DefWindowProcA
CreateWindowExA
CreateWindowExW

gdi32

CreateDCW

oleaut32

SafeArrayCopy
SetErrorInfo

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ