8747fc614e38b272494715d8c8d62224_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8747fc614e38b272494715d8c8d62224_JaffaCakes118
Size

107KB
MD5

8747fc614e38b272494715d8c8d62224
SHA1

cebf6552bc6b8dcf4fff90dc836c680b0b1f2b98
SHA256

71a6f4536ea22ea0c52ac27ffb865f674e9124734bc8b9239932ab19eb9d2236
SHA512

49be91304fb83532ceb12a45c60edf1c7cdd6770eb46bd767811141f877ad772b2c07edd0465369ac72bd9a58330c6c88932ac1a0f66a65cf25eeea128f0f701
SSDEEP

3072:sZqq0gPCMzsNa2bdPT6GL71I2wYvqKYPbCjhE50:Evzz2t6Gn1I2wYvqnbgCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8747fc614e38b272494715d8c8d62224_JaffaCakes118

Files

8747fc614e38b272494715d8c8d62224_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50b1522c0f44feea3c1f3b6d9063be67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

CreateWindowExA
DeleteMenu

gdi32

CreateRectRgn
Rectangle
CreateDCW

oleaut32

GetErrorInfo

msvcrt

_adjust_fdiv
strcmp
_exit
_XcptFilter
exit
_controlfp
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ