b355231dd16205d29a66486d1d6a0bc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b355231dd16205d29a66486d1d6a0bc0_JaffaCakes118
Size

273KB
MD5

b355231dd16205d29a66486d1d6a0bc0
SHA1

115f3b121e76f7e5db057c6b6c7c19ef90177dc2
SHA256

d614d08b4a3686133d35ac9932b8f189203700b69f873d9239fda8b2032f52e1
SHA512

c3652cffee40fec046f6f390c51a25930887280b2ba0b904e67e0a9af3c5fb103241d7d2dfbc384b60e10c36a96d02805308a3f6f17f4d04e73e155a448c691a
SSDEEP

6144:qDG/I3Kp51rLx2WMYWcOricibb4YyB67RAUI://I4rVHWHucGblyB67RAUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b355231dd16205d29a66486d1d6a0bc0_JaffaCakes118

Files

b355231dd16205d29a66486d1d6a0bc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9937f8047d4f11870190689010f09a5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetStartupInfoA
GetModuleHandleA

user32

IsWindowVisible
FillRect
GetWindowRect
DestroyWindow

gdi32

DeleteDC
CreateRectRgn
GetDeviceCaps
FrameRgn

oleaut32

SysAllocStringByteLen
GetErrorInfo

msvcrt

_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strrev

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ