675e23767d91c136922dda1d2c9e5e89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

675e23767d91c136922dda1d2c9e5e89_JaffaCakes118
Size

76KB
MD5

675e23767d91c136922dda1d2c9e5e89
SHA1

c8c10c3cac0872474f2c98d9f2713f643f574824
SHA256

519ab12d3249e706ed4112593dff4970e5ceb25354c2c5509f0446e5c86b32aa
SHA512

8d7262725d11a4cf596744a13ffedb79d7e418a5ea8a672c1535d36dea7bf0b645ede4205c923c000921203dcc6977b23c4b2e15514fb32aa80112023398c064
SSDEEP

1536:HhgPT7RJz8KeXGyZhfUaeVVaKBOGC/0VcW0U:Hh+TlJTe2mGaeVUKQZ/0Vc5U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
675e23767d91c136922dda1d2c9e5e89_JaffaCakes118

Files

675e23767d91c136922dda1d2c9e5e89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c363ca3b499130fbe536c85069110418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
TlsGetValue

user32

ShowCursor
LoadCursorFromFileA
ScreenToClient

gdi32

CancelDC
CombineTransform
SetDIBits

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE