47e6a6e7c4f5d86d9fd1c2014bd7ace8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47e6a6e7c4f5d86d9fd1c2014bd7ace8_JaffaCakes118
Size

124KB
MD5

47e6a6e7c4f5d86d9fd1c2014bd7ace8
SHA1

46417b4bb288b549a23566b8ca2d9f14ef4f3331
SHA256

af49918bf2c95994a53c30ec6a819d7c42220cc694c1e61babec6cd7447d35e6
SHA512

938a5e7aaa5c718cc7b7e685f3c92e5d3b9ec95ee2bc552295202ba8011b2fab0da6ddee046eff0554fcf292bd2ec5727ff2e0439c80beb6facc3cfd17df1ee5
SSDEEP

3072:x8AawJ2bhRg7xSjC6NcpkRfadhfyOzgcTaIi787YOgWUAyDHeO:Tz2bLg7kwwfyBccTaFSFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47e6a6e7c4f5d86d9fd1c2014bd7ace8_JaffaCakes118

Files

47e6a6e7c4f5d86d9fd1c2014bd7ace8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fa05fe852d4325ca9f9956599349f7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
GetStartupInfoA
LoadLibraryA
GetProcAddress
CreateThread
GetModuleHandleA
Sleep

user32

EndDialog
MessageBoxA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DialogBoxParamA
SendDlgItemMessageA
GetDC
LoadImageA

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
SelectObject

msvcrt

atoi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strlen
_except_handler3
__setusermatherr
memset
??2@YAPAXI@Z
getenv
sprintf
malloc
memmove
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ