95df2989b506f6110e075fbb4675f45e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95df2989b506f6110e075fbb4675f45e_JaffaCakes118
Size

170KB
MD5

95df2989b506f6110e075fbb4675f45e
SHA1

91203ae86f71b63dbe614d0e7f2152596ceb29e7
SHA256

a9df88845143901ebd686756f799bc8719dc2007db23373ccd000bdc18c98885
SHA512

38a655552ae933f85a8e88daf096acca039ad4a2f0db340cbc04bd844406f771d75d27c6f95dc4eea121ae2c3d0ff938c74d2f1e6b6bea234e3e47d5d63d5f06
SSDEEP

3072:dxZR6LEutTBfb6YI8L9dPSIs+ll3PIoYxEf6Wb6N:TZ0LEutTBzm8LHPY+fINEf6g6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95df2989b506f6110e075fbb4675f45e_JaffaCakes118

Files

95df2989b506f6110e075fbb4675f45e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e05a206cebe8c293e8045079e2371d9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

CreateCompatibleBitmap
DeleteMetaFile
CreateDCA
ExtTextOutA
SetViewportOrgEx
Ellipse
GetObjectA
CreateSolidBrush
SetDIBits

msvcrt

__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_ftol

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ