6528207c6828faf4e8825ad3a2c5ae11_JaffaCakes118 | Triage

Sharing

General

Target

6528207c6828faf4e8825ad3a2c5ae11_JaffaCakes118
Size

77KB
MD5

6528207c6828faf4e8825ad3a2c5ae11
SHA1

44b93eba570c0e465a554791bf0c9bbd2023e743
SHA256

82e1f0ecb3067c541e093db87ccb6593eef9c87602ea0c34202c6c77f2efb124
SHA512

7df92bc021d0a606613a566ed8ab335f5fcc9ad1688fa2a02a2c33c80f2cd6fa69d1f13ee2b03b5ae7c45d1cb449de594ceb4d118c8505d9698da5c1ee9aa33b
SSDEEP

1536:0LZvewESXBW5IIe58DeDBb7mxkEJ0cOAwL0QIpk5v:0Rewvo5IIe5geNixkDveQIpM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6528207c6828faf4e8825ad3a2c5ae11_JaffaCakes118

Files

6528207c6828faf4e8825ad3a2c5ae11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

524c8cf63fdcc20ea42ab377ca63a480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsAlloc
GetModuleHandleA
GetLastError

user32

ScreenToClient
LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
CombineTransform
SetDIBits

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE