8233111f8bc06d9c4539f86027ae4223_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8233111f8bc06d9c4539f86027ae4223_JaffaCakes118
Size

292KB
MD5

8233111f8bc06d9c4539f86027ae4223
SHA1

5b8bca80b044ece1fef8b4c20f4db13af873a41f
SHA256

1e52247f5f0a1f0b17bd80c2889e81524a317e845b7f0e54cef04a20c6c71292
SHA512

0ff244f943158986998adf718d6b41f2ee2975f2330e5d9df68a57be738cc296b5b4fe97891cced19ed688bb5b3f5b9d53097830b3986d9f78d3907565e16436
SSDEEP

6144:CK9EE8uS0S5JsgkxdgRQgoaogHrxGn+ZLQDGtjto5T9mOmX2AO:H9EFESvsxxS6NajH9Gn+YgK5T96fO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8233111f8bc06d9c4539f86027ae4223_JaffaCakes118

Files

8233111f8bc06d9c4539f86027ae4223_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81d38a13222898c0c937bebf3e37e465

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

DefWindowProcW
MoveWindow
BeginPaint
CloseClipboard

gdi32

CreateDCW
GetDeviceCaps
BitBlt
CombineRgn

oleaut32

SetErrorInfo
CreateErrorInfo
SafeArrayCopy

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
strcmp
__p__fmode
_XcptFilter
exit
_acmdln
__getmainargs
_exit
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ