a35caee7f56482585dc591dec4c193b5_JaffaCakes118 | Triage

Sharing

General

Target

a35caee7f56482585dc591dec4c193b5_JaffaCakes118
Size

128KB
MD5

a35caee7f56482585dc591dec4c193b5
SHA1

bdd080bdaadb08f5540d625b7f5920a3dc05db04
SHA256

311a49fecc22d0d597c58642ddeca1616028b3b4618879b612e89d1c6c10bde4
SHA512

62aba90ba530cc0502b4faf47feefc0db7e25ef154f186801358faad6e618eca7810eac1c73498ddc3ac26101ebfff2d385404c8c90b30d4fa9b2f3fb87d83ce
SSDEEP

3072:AwC2+u5HP8zYARWpfd84W/IaDdzlIg0lvDzNlqf3ZTzh6:NkzHRWRd84datlsvvk/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a35caee7f56482585dc591dec4c193b5_JaffaCakes118

Files

a35caee7f56482585dc591dec4c193b5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

19649b5b1d693628f6d227a906c68417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
memcpy
_XcptFilter
_adjust_fdiv
_controlfp
__getmainargs
__setusermatherr
__p__fmode
_except_handler3
__set_app_type
exit
_exit
__p__commode
_acmdln

gdi32

RectInRegion
DeleteDC
StartPage

kernel32

GetStartupInfoA
VirtualFree
VirtualAllocEx
VirtualProtect
GetModuleHandleA

user32

DrawIconEx
GetKeyState
IsIconic
LoadCursorA
UnionRect
FindWindowA
CheckMenuItem
MsgWaitForMultipleObjects
CheckDlgButton
InvalidateRect
UpdateWindow
DeleteMenu
SetFocus
GetMenuItemID
GetWindowTextA
GetSysColor

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ