a466fff7c0769165e87c17212141c1ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a466fff7c0769165e87c17212141c1ef_JaffaCakes118
Size

207KB
MD5

a466fff7c0769165e87c17212141c1ef
SHA1

603948daf81ac5deb1318e4704aa1480e31eb65a
SHA256

2abc417fc17ccc57108a08f2b8be0656f6e8c01481a01d52683a4fcfd8ac4c18
SHA512

cb5e8f8325438bf947781b534169cc0376f6dcdc00d17d113ec2482b6f666c42127bce4ff90fb22bff22e96ff75b555352457af962e0a95d4ad5a942eaa10740
SSDEEP

3072:WOn5zQcn6j8drT771Zw7tuTZTzX/tfoN3RAatTBfyQy+:WC5Uc6iDDZTj/tANyatTBKQy+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a466fff7c0769165e87c17212141c1ef_JaffaCakes118

Files

a466fff7c0769165e87c17212141c1ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

129a818a9db67b09dbd71a8da9f98a2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

GetTextColor
SetViewportOrgEx
CopyMetaFileA
SetBkMode
SaveDC
EnumFontsA
DeleteDC
GetBkMode
PlayEnhMetaFile

msvcrt

__CxxFrameHandler
_ftol
_CxxThrowException
_purecall
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
??3@YAXPAX@Z

Sections

.text
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ