440431be00d29d41443827e019844c34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440431be00d29d41443827e019844c34_JaffaCakes118
Size

126KB
MD5

440431be00d29d41443827e019844c34
SHA1

39534b137e95d4b2575314052bdfa1810ab74eb7
SHA256

44a74fbd549585d611169694019450d8f1c3832af2b5d59a456a7ee6be6e9547
SHA512

8fe5418be79200ce101daf833a70cdefc8762bdc6d806a2cbb13cd97169c69d028f86044b4e6b0413dda9454df4e10419aaae927be8332d514d49174138e13bf
SSDEEP

1536:c/P2+NpNqbE3bj9GL1LXg2fbddkv8/xqeygn0y5LA/rke0dyMXhNhpXIZhzJ9W2Y:c/TT1EpLZxdfARkLA/HYhLp2hzLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
440431be00d29d41443827e019844c34_JaffaCakes118

Files

440431be00d29d41443827e019844c34_JaffaCakes118
.exe windows:1 windows x86 arch:x86

93bd302edb837c5bb7314a766ddeb05d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

LineTo
GetTextMetricsA
CreatePen
SetTextColor

user32

CreateWindowExA
SetClassLongA

msvcrt

__p__fmode
_initterm
_ultow
_wmkdir
_controlfp
_execvpe
exit
memcpy
_acmdln
__getmainargs
__set_app_type
_XcptFilter
_except_handler3
__setusermatherr
__p__commode
_adjust_fdiv
_exit

kernel32

GetThreadContext
GetStartupInfoA
CreateFileA
GetModuleHandleA
GetStringTypeA

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoSetProxyBlanket

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ