aaade28eb7a62b102040800251bfbd71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaade28eb7a62b102040800251bfbd71_JaffaCakes118
Size

383KB
MD5

aaade28eb7a62b102040800251bfbd71
SHA1

fc70f31e71d81a23b0af487ef05324e579791592
SHA256

c9caa4a8ec8ef261042c3f8bb0bfe5a4a2e86adb7594941cedf0a1e9b0cee446
SHA512

c1d1d75b4c097d07477bf464ee78c9cc6be9bb245b9b4db54c134af9db6b6820da90f5496092440bf9c33a9e664450bb4451f929c95c66fee4d47823aa78a2ee
SSDEEP

6144:aW9Spa2MxDyqXGHoiIHr0B93vAJ6DF3c7F0V2V9BHsenIwKvUW4nGOdNFZwkCe7r:aeSsBXGHU0BRvAJ6DFafTKvQZaIO6JJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaade28eb7a62b102040800251bfbd71_JaffaCakes118

Files

aaade28eb7a62b102040800251bfbd71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26aa6042c44f7f77a63cbc36f24fedf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
FindWindowA
RegisterWindowMessageA

oledlg

ord6
ord9
ord11
ord5
ord1
ord2

msvcrt

_XcptFilter
exit
_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

kernel32

GetStartupInfoA
ExitProcess
GetProcAddress
GetModuleHandleA
IsValidCodePage
GetCurrencyFormatA
GlobalFlags
HeapUnlock
HeapValidate
LocalFree
FoldStringA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ztot
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ