c18a6e6bf5d4fd5b870c54919c372085_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c18a6e6bf5d4fd5b870c54919c372085_JaffaCakes118
Size

75KB
MD5

c18a6e6bf5d4fd5b870c54919c372085
SHA1

3dafcdcd937037ebc738e8337f6b021d04a594e2
SHA256

d60c1c88399815cee06c9c1cff8a1cee8d7bf4ce5d2480292e93b1b367b7a61a
SHA512

0a5b93005a75cc0190fe7d26c7e916296b00ebf775a5a1b104a56d7df467b714549137cc1d648280f97200c9a1154136bfaec57ffa26ce40b0e31c145e9d0e55
SSDEEP

1536:4fnB7irDC5sPkPaF9KcQ6O78qO5iyqQYgMhNdQO87NpwQ5Ye:4fBOrsDuQRnOwyqNGxYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c18a6e6bf5d4fd5b870c54919c372085_JaffaCakes118

Files

c18a6e6bf5d4fd5b870c54919c372085_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e509b7ac26756fd194252945e53cda38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
_hread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
WritePrivateProfileSectionA
CreatePipe

gdi32

RemoveFontResourceA

user32

InvertRect
LoadBitmapA
GetWindowTextA
ScrollWindow

Exports

Exports

IsCtvnwhlvo
AddRkfwapobd
Phhdfrwbsg

Sections

.text
Size: 72KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ