828218b09195e1ff840a75ee7fffdee4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

828218b09195e1ff840a75ee7fffdee4_JaffaCakes118
Size

730KB
MD5

828218b09195e1ff840a75ee7fffdee4
SHA1

1e99088eafbd91f09c6ac3a9e37b9d88e3b8cb17
SHA256

15b54f1f43d0249bb498cab2e6122cf007c7b511db257fd150e10120f4da48a1
SHA512

f8a35460e5ee360b78922b098c863f8d32084c58fadc08c78b52c456b1e66bc3ca48939b0ea0d6a739124d459a743b1e3f8439aba6fe2d0bd28b1e437a332304
SSDEEP

12288:fv+JfkNOtTMh7fFUd0MWTKpvQWwwIGZNbf3ZuKoOjO71a0eVP5HYWYsIm7dJ9e5I:fv+JfttT47fFY0UpvQWbIGZ5/kKoOjy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828218b09195e1ff840a75ee7fffdee4_JaffaCakes118

Files

828218b09195e1ff840a75ee7fffdee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

275ffd17cebe505ce8372bcbf5ce29c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

ExtSelectClipRgn
GetTextAlign
SetBrushOrgEx
EnumFontsA
GetViewportOrgEx
RestoreDC
SetStretchBltMode
GetObjectA
GetCurrentObject
SelectPalette

msvcrt

__CxxFrameHandler
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_except_handler3

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ