8656d8652d5fa799ac91b94e0c67a111_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8656d8652d5fa799ac91b94e0c67a111_JaffaCakes118
Size

141KB
MD5

8656d8652d5fa799ac91b94e0c67a111
SHA1

3795b64c9e5e8903efc8206313da65dcfa8611b9
SHA256

714d9d23c5b540106ba3a52d3f201dbcbbc2f5a6509c330c8111c87a84f89e1f
SHA512

fc03bfcec2cf9bffa9701838ff0be9e925b708c38ddaafa8026c89c7e30927b5016d615207c849bbe327ceb9459da1d7ca6c269aed3243d62918da0d9610852c
SSDEEP

3072:RQtlqRpllGmF/HPD/jxhaQ9tSDMFKLuQq:RQHolDF/HPJhaUt60KyQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8656d8652d5fa799ac91b94e0c67a111_JaffaCakes118

Files

8656d8652d5fa799ac91b94e0c67a111_JaffaCakes118
.exe windows:1 windows x86 arch:x86

213ab2059379569923b559a8cfbc9176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_acmdln
_XcptFilter
__getmainargs
iswascii
__p__commode
__p__fmode
exit
__setusermatherr
_adjust_fdiv
_cputs
_exit
atoi
pow
memcpy
_except_handler3
_getdllprocaddr
_wfsopen
_initterm
_controlfp

gdi32

SetTextAlign
LineTo
DeleteDC
CreatePen
ExtTextOutA
SelectClipRgn
CreateCompatibleBitmap
CreateRectRgn

user32

MoveWindow
IsWindowVisible
GetWindow
SetWindowLongA

kernel32

Module32First
GetStartupInfoA
TlsSetValue
GetModuleHandleA

ole32

CoUninitialize
CoSetProxyBlanket
CoCreateInstance

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ