48f47c7333f8f6ad07cb1d963d200a89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48f47c7333f8f6ad07cb1d963d200a89_JaffaCakes118
Size

253KB
MD5

48f47c7333f8f6ad07cb1d963d200a89
SHA1

348a64bbdfe73cffa410daa88f57c5d76836e869
SHA256

e227949856bd96e64f93f6d9225a87a731452810b0851aaf8f650078a10c9f4e
SHA512

bb4233f23c2888ca847f36f5658c333efe56cb7e2d78f9b38401b84f51da3f93f644f3ed4a280b55272b994e326c05e0e875266528e1177326bdb6056c96638a
SSDEEP

6144:O7n4bNYqUoPvsgMtYc7/iDadEmtTBd+DL:bb3wVbinmtT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f47c7333f8f6ad07cb1d963d200a89_JaffaCakes118

Files

48f47c7333f8f6ad07cb1d963d200a89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42b95ce9be534f9dcd893c063dfaf8fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

GetStockObject
GetRgnBox
GetCharWidthA
Ellipse
OffsetRgn
GetTextCharacterExtra
SetBkColor
SetGraphicsMode
GetTextColor

msvcrt

__CxxFrameHandler
_ftol
_CxxThrowException
_purecall
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
??3@YAXPAX@Z

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ