d01a18778df69eebbb4140a7a03fa45c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d01a18778df69eebbb4140a7a03fa45c_JaffaCakes118
Size

153KB
MD5

d01a18778df69eebbb4140a7a03fa45c
SHA1

b142aa21ef766a30877e95f7b4f690d2191ecaa7
SHA256

13707f89875750c12ad7a09f0bd17686128d711b74fef659f353b176a3556b98
SHA512

36900d3981b4f39b703fcc4151617969a0911cf0d44126e547b43e7188f0ee68351dfe08d0165f9d8c62062f1f07606dae4c2ba2898146e02a6466580906b3ec
SSDEEP

3072:2aIt5Y0K1aWdVmqTn8UvcOgYIlOFPLMAVuothl/ly8YF:1IsmqzjUpYIYFzMcRhTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d01a18778df69eebbb4140a7a03fa45c_JaffaCakes118

Files

d01a18778df69eebbb4140a7a03fa45c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47db72c5fe139813bc895e3dcf21f3e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA
FindFirstFileA

user32

DrawTextW
GetClientRect
CloseClipboard
ShowWindow

gdi32

Rectangle
CreateSolidBrush

msvcrt

__setusermatherr
strcmp
strstr
strlen
_exit
_XcptFilter
_controlfp
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ