be2906eb36e5e81e9863037a2261c09f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be2906eb36e5e81e9863037a2261c09f_JaffaCakes118
Size

72KB
MD5

be2906eb36e5e81e9863037a2261c09f
SHA1

18a6f6b9ac286d7aa1ea6fae6091f3505d14f9c5
SHA256

517e7bb6205f247c1fcd036a623682caeb8a647d00f372dce679eca75550c653
SHA512

67e1c30d8921f3ec37a4505e9c210bcb4000521c5e220507f31130eae32d5bffdfc8c86b4a1a7a3d6cd06c21dea8eb93ed7c17d969c84ffae827db8a28bd75e6
SSDEEP

1536:UMV7/FJENCNqzYbrpzki8AOrOXnHe7pF8MewMal7L1i:FJXNaYbrpzkKk08lBl7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be2906eb36e5e81e9863037a2261c09f_JaffaCakes118

Files

be2906eb36e5e81e9863037a2261c09f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4feb679db8028be90dd8d2cd3fd88aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

CloseClipboard
FillRect
EmptyClipboard
IsWindowEnabled
CreateWindowExA

gdi32

BitBlt
CreateDCA
CreateCompatibleDC

oleaut32

SetErrorInfo
GetErrorInfo

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
strcmp
_exit
__p__fmode
exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ