7581487295f2c3c898e591d441abdf60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7581487295f2c3c898e591d441abdf60_JaffaCakes118
Size

216KB
MD5

7581487295f2c3c898e591d441abdf60
SHA1

cacabcfe584aa180b558592841aab95b8db94b32
SHA256

927b36fd718b1521c9417f24f6226bea1ba2632104f8977658f3465a91d4d496
SHA512

5f0f12914f06d8832d1086c291106bf6fb8de666b5f2d7eb510bb036c00f8c2af46cfcc91985aedd810acf2568064b0e3635acdfb1c2212085403d7a9898e69d
SSDEEP

3072:I6KFj+MCmrsCW/V/O4Dr4N8SaiVcfg9pZDVIsac4D4jUbWJiF3JpeU1Aq9qVlj4:IXiiP8Y4DEuSxtDVOcTAWI3VAqo0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7581487295f2c3c898e591d441abdf60_JaffaCakes118

Files

7581487295f2c3c898e591d441abdf60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5b0d8b656e1a7f78031f0e7ca5d4bc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

GetSysColor
GetDC
GetDesktopWindow

msvcrt

__setusermatherr
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
_initterm
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ