b4f9b66c0f2f8962a76cce2767328a54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f9b66c0f2f8962a76cce2767328a54_JaffaCakes118
Size

182KB
MD5

b4f9b66c0f2f8962a76cce2767328a54
SHA1

1113c320251748dec3749b984abd30b6cc8a9030
SHA256

467691eb892274fb932cdc8f740e7f09c8570a0e1b274089a36903cd095ca38a
SHA512

c1308959c101b99d7562168cee0d66c682094a8734e9ff1d8876d452bd20161c63484a62d0adfa377de9e23f154d34ea37200951b3f9e916814dab1d38f6ad84
SSDEEP

3072:UDjGOy8j9OtTBfT+pM2RNiBurjVeO2SMygKPgHC09eqnd3W6nq7Y6EY:U2Oy29OtTB0RNiBkVeOtUKPoCFq01M69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f9b66c0f2f8962a76cce2767328a54_JaffaCakes118

Files

b4f9b66c0f2f8962a76cce2767328a54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b325f09d9015bc7956a51b7bf467435

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

CreateDIBitmap
GetMapMode
CreateRectRgn
SetBkMode
SetGraphicsMode
IntersectClipRect
CreateDCA
CopyEnhMetaFileA
GetCharABCWidthsA
DeleteEnhMetaFile

msvcrt

__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_ftol

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ