bea85faf4d07e1b3f1e006803c60ca55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bea85faf4d07e1b3f1e006803c60ca55_JaffaCakes118
Size

66KB
MD5

bea85faf4d07e1b3f1e006803c60ca55
SHA1

bac0320dbe3351bf57405c8e513966d272cd0615
SHA256

3cce1f280c8820e8665e6dfc00701d3e1ebeb093f18b1c02795a2435616ffb3b
SHA512

6646caceaeee09d2896f40f032b5fda22f871f835655d2f3938af1d7079fc2cbaadc97839f886182a51da47fed0c37f11bd0b42efe3af2fdab694f00aa6d2362
SSDEEP

1536:U84LzL++zEciP2AC3VHQIyKS/Nj78s97L6rAJzcD9I:03LxpiPgHQIypVj78s9v6rAJzcDK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bea85faf4d07e1b3f1e006803c60ca55_JaffaCakes118

Files

bea85faf4d07e1b3f1e006803c60ca55_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8d01d650e3590dee96a65288f05824c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_exit
__set_app_type
memcpy
_except_handler3
_adjust_fdiv
__setusermatherr
exit
__p__commode
_initterm
__p__fmode
_controlfp
_XcptFilter
_acmdln

gdi32

CreatePen
CreateFontIndirectA
CreateDIBSection

kernel32

VirtualAlloc
VirtualFree
GetStartupInfoA
GetModuleHandleA

user32

DispatchMessageA
FindWindowExA
GetSysColorBrush
RemoveMenu
SetWindowLongA
GetDoubleClickTime
GetWindowDC
CopyRect
GetMessageA
WindowFromPoint
SetDlgItemTextA
PtInRect
wsprintfA
LoadCursorW
TrackPopupMenuEx

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ