c7df8ca5fd7600865309eafe738ffc50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7df8ca5fd7600865309eafe738ffc50_JaffaCakes118
Size

203KB
MD5

c7df8ca5fd7600865309eafe738ffc50
SHA1

4390cc8d6d4bb620e92baa25b0c1e394953b345f
SHA256

7f559b150d805054b9b3f9de1926153932a5491eb93a1d6488793d9519a22713
SHA512

74275d562f8170d9d0d214554c554b13b1c00eea30ac2953124bea0e6edc032547f2f53065b6c6fbeb3d145ff002712f91bb90f94d13dd96387a8f2268eff512
SSDEEP

6144:pblH1J1+cLD9e5lmyZr6W9kD7RqzXV1JrS:TVT+We7isutQV1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7df8ca5fd7600865309eafe738ffc50_JaffaCakes118

Files

c7df8ca5fd7600865309eafe738ffc50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3345357651df079d1851b52e3e5424ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DrawTextA
GetDC
GetWindow
EmptyClipboard
CreateWindowExA

gdi32

BitBlt
GetStockObject

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocStringByteLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ