490cd76db3a0a7300543d778df209495_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

490cd76db3a0a7300543d778df209495_JaffaCakes118
Size

134KB
MD5

490cd76db3a0a7300543d778df209495
SHA1

cd7dcb47da20a9327dd1fc75a6d1a78ff45d5ab9
SHA256

903d4cf44d5f619196ede41183a909fab25430d61292776c2bf60eb2c0400420
SHA512

352cbb74410cbfd6434900250d27d8ce3bb43505c1b73086c14cc006f1459ea2b71ef892d656d332150ca661dfe6ced021544800abe1ce52cca560175131b17f
SSDEEP

3072:j28qTkeRSXORBSzRRQ9KEGR11Ib68hZpY/u81JnJ9MiDAgDOSZrDfi:j9kRSX259KfZ/6Bw93MiISZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490cd76db3a0a7300543d778df209495_JaffaCakes118

Files

490cd76db3a0a7300543d778df209495_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb4458fde5c83ee8068b744f0ea91e80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
OpenClipboard
CloseWindow
CreateWindowExA
GetWindowRect
IsWindowEnabled

gdi32

Rectangle
BitBlt

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
_except_handler3
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ