c04a8d2055e13aee65a80e5b8b2ab9a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c04a8d2055e13aee65a80e5b8b2ab9a6_JaffaCakes118
Size

793KB
MD5

c04a8d2055e13aee65a80e5b8b2ab9a6
SHA1

e6442d96bd05fc91edf29a5d8fe65a7de2655519
SHA256

264121d22795227b95ec0c631d933a6510e613be4e60f55066e872d84638e37b
SHA512

e5a553ca67108c442f45b7155166ee89b8a5ed07952e885352248197186e86538e65dc2599ead5019fbbee2da56c9a8a729b0bfe45a1611b892ba2c7bb774b5f
SSDEEP

24576:pPTEmh/RufFFFFXcu4dlrCWoXJNgyzx/wW:p7p9E3F4+WsDdxl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04a8d2055e13aee65a80e5b8b2ab9a6_JaffaCakes118

Files

c04a8d2055e13aee65a80e5b8b2ab9a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60355c5cc096313b96ffcdf03860b203

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
FindResourceExW
FindResourceW
GetLocaleInfoW
LoadResource
LockResource
GetStartupInfoA
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

__wgetmainargs
_initterm
memset
__p__fmode
acos
__p__commode
__setusermatherr
_amsg_exit
__dllonexit
_onexit
_wcmdln
memcpy

msimg32

TransparentBlt

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ