41a3a8eb34b27a9b998a3999cc95d03e_JaffaCakes118 | Triage

Sharing

General

Target

41a3a8eb34b27a9b998a3999cc95d03e_JaffaCakes118
Size

342KB
MD5

41a3a8eb34b27a9b998a3999cc95d03e
SHA1

5fd676177f3360afccffcd47e16e18b079884f04
SHA256

3713ab7d7c085254d7fcf4af29ef8261a95b7817b6e5bd41a90630c3b70fb98f
SHA512

4f049cdbd367334e76e766cb3d4c442108538afc2e3d1f72a28503301dc32231c6c185ea7e2d9e57be38a7d7956683f2c3292af330167b89447768792be1fe4d
SSDEEP

3072:DM5erVetRdRX2CT23CRxyRaK9qe9hGhr5XytM7x05DvRas/RjIADuhorgyA8xhn:xrVefn2CC0gQRdBGpRD/RjLIlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a3a8eb34b27a9b998a3999cc95d03e_JaffaCakes118

Files

41a3a8eb34b27a9b998a3999cc95d03e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb3defa59fa347916c27a8932e0844a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

CloseClipboard
ReleaseDC
SetWindowPos
CloseWindow
MoveWindow
SetClipboardData
DefWindowProcA
OpenClipboard
EmptyClipboard

gdi32

CreateDCA
CreateRectRgn
CreateSolidBrush
FrameRgn

oleaut32

CreateErrorInfo
SetErrorInfo

msvcrt

_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__setusermatherr
_initterm
__p__commode
strcmp
_exit
_XcptFilter
exit
__getmainargs
_adjust_fdiv

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ