b976134f55a3bbbc7e3a6ec7e944a2e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b976134f55a3bbbc7e3a6ec7e944a2e3_JaffaCakes118
Size

148KB
MD5

b976134f55a3bbbc7e3a6ec7e944a2e3
SHA1

59a26e845f57cb82b8d0a5867ec7cb2f7fe51d6b
SHA256

62ebd8651c6f6e58a97848668d3954eb7e3023cf1077ac47552ea58c8eebdf2d
SHA512

e0b5be27144957cbd8ea14412c836cb68f918cd963d59fc196a20e954e7fd1df4ff023801e9f7284809a6d0747f90cd2135680513f8597c0aa0dafacdacacbd7
SSDEEP

3072:7yrJpzLjiXL8J4gH9Vc4HnPARYA1Sp+VjnKIAgHb27ac7G6:7yrm724gc4HnPARZ1S4Vjncg7Ex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b976134f55a3bbbc7e3a6ec7e944a2e3_JaffaCakes118

Files

b976134f55a3bbbc7e3a6ec7e944a2e3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

412b6d4e8a0a5685e2676586c58010a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
memcpy
__p__fmode
_initterm
_adjust_fdiv
__set_app_type
_controlfp
_XcptFilter
_acmdln
__getmainargs
exit
__p__commode
_exit
_except_handler3

gdi32

CreateRectRgnIndirect
Polyline
CreateSolidBrush

kernel32

VirtualAlloc
GetStartupInfoA
VirtualFree
GetModuleHandleA

user32

EndDeferWindowPos
SetUserObjectSecurity
DefWindowProcA
LoadCursorW
SendMessageTimeoutA
EnableWindow
GetWindowLongA
SetCapture
ShowWindowAsync
SetFocus
GetClassLongA
SetWindowPos
InsertMenuA
CreateDialogParamA
LoadMenuA

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ