a8c319b80126fae0642ecd0e774d3562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c319b80126fae0642ecd0e774d3562_JaffaCakes118
Size

209KB
MD5

a8c319b80126fae0642ecd0e774d3562
SHA1

89e6e50779d20dbfcf09e54298fe9f3641b5dafb
SHA256

87905ca4cbea6b34ef174e65cf25c587c314d0f15cd2ace58f53eea39f027e7f
SHA512

30bb977860e0d0c0e22e554d7929a292cd11869567e782158e0889a4ec7a37d0f2faadaac8a196b4424027bc26e362a1a58e63fb63cf0702469e5d08ed615b12
SSDEEP

3072:ZhnzPj7MWRiX3PXPezn8YxwF9EgaQaaByiiztC/Hh6uy0d5NKe6DktbrqdLm3:gWRVzxSF2g6aAiiRCcu5d6eRRq5m3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c319b80126fae0642ecd0e774d3562_JaffaCakes118

Files

a8c319b80126fae0642ecd0e774d3562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df553127d8f2af0449bcae531b9b504a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleHandleW
GetFileType
CreateFileW
FindClose
GetTempPathA
CloseHandle
FindNextFileA
LoadLibraryA
GetStartupInfoA
CreateFileA
GetTempPathW

user32

GetWindow
GetWindowRect
GetWindowTextA
BeginPaint
CloseClipboard

gdi32

FrameRgn

oleaut32

SysFreeString

msvcrt

_acmdln
_controlfp
__p__fmode
_except_handler3
strstr
strlen
strcmp
_exit
_XcptFilter
exit
__p__commode
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ