47b85f7d03af81459b836f1c3a83b5f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47b85f7d03af81459b836f1c3a83b5f4_JaffaCakes118
Size

32KB
MD5

47b85f7d03af81459b836f1c3a83b5f4
SHA1

bfb85d1b4edc30b7af66de92994914c1fe99f019
SHA256

64bbf0a31babe79f5363c14f62b0830d62fd5de44d562bed0ffa636c80ea7278
SHA512

460a033bfd8964b7b982c5fbc595309334b6a976334637f87d7c777a8867b22f66ef1d3aa2c27385659e0e63aa758cafb0c9879a4c6d064ebc09ca848fa34705
SSDEEP

768:9aVATjDtwkxVcmCoeVlTYJa674lstZBozaBW8T7k:9PTHykxVcmCoeVlTYJx4lstZLE8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47b85f7d03af81459b836f1c3a83b5f4_JaffaCakes118

Files

47b85f7d03af81459b836f1c3a83b5f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2798132f3774f672813671ea67e54b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA
GetStartupInfoA

user32

RegisterClassExA
FindWindowA
PostQuitMessage
DefWindowProcA
ShowWindow
CreateWindowExA
GetForegroundWindow

msvcrt

_exit
_controlfp
_except_handler3
??3@YAXPAX@Z
sprintf
fclose
fwrite
fopen
strchr
??2@YAPAXI@Z
__set_app_type
__CxxFrameHandler
atol
srand
time
rand
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ