b739a1b5a2c7dc0e3f524d6c20fad468_JaffaCakes118 | Triage

Sharing

General

Target

b739a1b5a2c7dc0e3f524d6c20fad468_JaffaCakes118
Size

110KB
MD5

b739a1b5a2c7dc0e3f524d6c20fad468
SHA1

cf015e24a015c25059d2f91263d11231b50f59c4
SHA256

1481d0d01e52052d549494413f1b4760b3434aa5acbcdf4e0c07330e06efb0cc
SHA512

db45a061513b352342e8cdc69f7fc82da3fb184676bf5a949ef14f0c1653e826bc6b1ee52a4d6bc8d073a4e631b793f6710c39a966ab437725ee162c743f9681
SSDEEP

3072:j28qTkeRSXORBSzRRQ9KEGR11Ib68hZpY/u81JnJ9MiDu:j9kRSX259KfZ/6Bw93Miy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b739a1b5a2c7dc0e3f524d6c20fad468_JaffaCakes118

Files

b739a1b5a2c7dc0e3f524d6c20fad468_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb4458fde5c83ee8068b744f0ea91e80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
OpenClipboard
CloseWindow
CreateWindowExA
GetWindowRect
IsWindowEnabled

gdi32

Rectangle
BitBlt

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
_except_handler3
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ