b6f0db8cde9684ffae2ef78887dbd932_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f0db8cde9684ffae2ef78887dbd932_JaffaCakes118
Size

172KB
MD5

b6f0db8cde9684ffae2ef78887dbd932
SHA1

ebf86aa357b58b954500048c37594b17d32ccc4b
SHA256

ca305d9a7bce0803ab4a1739fd3ed6ffdcd42c9e808e35218e3e54ddd7aa6775
SHA512

9d128275fe1986e857edab2e7a495f143f1a2e44a55bce9f2539d22706ba77609e4eec73baf78c7fead6f8a0f98c11283514eeecc69e7136fb8b10a258af2bb9
SSDEEP

3072:l8eJA+qBFbGuARSgs1SgnC+5kwEAeAvydkLCNT4YZpa0s16XqvATgNhF:l8CA+qBFbhMs1LCDGv0kUj7ajrvEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6f0db8cde9684ffae2ef78887dbd932_JaffaCakes118

Files

b6f0db8cde9684ffae2ef78887dbd932_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4629e330042b7937317ac885882b4bd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

ChangeDisplaySettingsA
GetDC
BeginPaint
GetWindowRect
EnableWindow
IsWindowEnabled
GetWindowTextA

gdi32

CreateSolidBrush
CreatePolygonRgn
CreateCompatibleBitmap

oleaut32

SysAllocStringLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
__p__commode
_XcptFilter
exit
_acmdln
_exit
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ