5e72a54d40a005b868c42979857660ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e72a54d40a005b868c42979857660ae_JaffaCakes118
Size

162KB
MD5

5e72a54d40a005b868c42979857660ae
SHA1

119a9f06844f618d3c56ee7ceb4bb4cc0d0ff679
SHA256

0149a9e3ff411b5abbcf556846d9f10d502f0e5792cfdb1f3eb1ac0af39f6aa7
SHA512

a837ea57390b93de40a1ecbd71af1faf2b60225b116ed451d880f0216c1d045e21897c5d14df4df034cbb62ae58faff34037fbbe8a3c62d7e43441e4c433c8e5
SSDEEP

3072:ohMioBiq3OtTBfGPgkk+3jgk5mmrFobkuO3oI2hSOCesFEelsocNzC:aMbB93OtTBuPdnjg4BmY/FjOCes/lsoN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e72a54d40a005b868c42979857660ae_JaffaCakes118

Files

5e72a54d40a005b868c42979857660ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

691e736850b619315a92d2ad01971f58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

SetViewportOrgEx
GetWindowExtEx
SetDIBits
SetBitmapBits
CreateRectRgn
GetTextCharacterExtra
SetBkColor
TranslateCharsetInfo
SetBkMode
CreateBitmap

msvcrt

__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_ftol

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ