c1760cdb4fd593cd0ed498b9f386ed96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1760cdb4fd593cd0ed498b9f386ed96_JaffaCakes118
Size

43KB
MD5

c1760cdb4fd593cd0ed498b9f386ed96
SHA1

7f54145c3e7971df24d3808bfec7f0018db291f9
SHA256

ae81d75bb671a0c7eda475a1e29bfc99db26c4a8c06629dd5d051008a9fa51ba
SHA512

d184c3b1d9e5952efea63b4c2b29428ccd4196723cdfbd1603faf4c3afdadf3c1e12f10dbffce484b449c36a79d67d493dee6471c86fea1b26999c291c9600a6
SSDEEP

768:7+YkDr6JrBIGgKL8oZ6HSNOPbrWZ3LloxWyPaHJO2ZYZ5BVg:aDfkL8oZ6HS3Z3LlJGa4yqBVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1760cdb4fd593cd0ed498b9f386ed96_JaffaCakes118

Files

c1760cdb4fd593cd0ed498b9f386ed96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edf989108935457957e1cafedb0baa66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsAlloc
GetModuleHandleA
GetLastError

user32

ShowCursor
ScreenToClient
LoadCursorFromFileA

gdi32

GetMapMode
CancelDC
SetPixel

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ