b28516f9cc81f4428e52a10e7c6c58b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28516f9cc81f4428e52a10e7c6c58b7_JaffaCakes118
Size

76KB
MD5

b28516f9cc81f4428e52a10e7c6c58b7
SHA1

4f02d7d65a0282f22cd55da4277b991dc6576c1d
SHA256

c958b537b2d8d98071fcf0db8069ef99b2f8ee3d4ba2349abf85b6fc5ae969db
SHA512

ef81fb8c3a9a38766732efd33a5fd8e4afaa068bac4e0d10d76fc940e9659779b1356fa0812b09169a7a3b56acf0f669961d2f97292b75d2ba5ab912963949c8
SSDEEP

1536:ruhgPT7RJz8KeXGyZhfUaeVVaKBOGC/0VcW0U:ruh+TlJTe2mGaeVUKQZ/0Vc5U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28516f9cc81f4428e52a10e7c6c58b7_JaffaCakes118

Files

b28516f9cc81f4428e52a10e7c6c58b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c363ca3b499130fbe536c85069110418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
TlsGetValue

user32

ShowCursor
LoadCursorFromFileA
ScreenToClient

gdi32

CancelDC
CombineTransform
SetDIBits

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE