d105be40f9987a9dcbeb77bd50e43dc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d105be40f9987a9dcbeb77bd50e43dc9_JaffaCakes118
Size

173KB
MD5

d105be40f9987a9dcbeb77bd50e43dc9
SHA1

46e686b29bed5701246e5d214362f3b4f1f604b1
SHA256

39e737a7156d7907ecfccf4d2f7d57460579d883bec5ccb7ffa9f9af9e0fbad8
SHA512

7896eb2b2285a24c9b5bbc8716ecfc99f1156b0a51247a493e49ecd24fc025ca7acb8155083dba1eda8f3492c82762acf9a3122038fd6ad66a2e434c072c8290
SSDEEP

3072:LrwzB3yJf1ij+Iy/WCvZVtjbzfNnb18bocEovyMwqDbUJLFpwljO5GoS9:Lr6B32f1S+fWCvZVtv8bocEoaNqDbgYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d105be40f9987a9dcbeb77bd50e43dc9_JaffaCakes118

Files

d105be40f9987a9dcbeb77bd50e43dc9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1f2154d5d0d3f93fd0a1ca71f5692471

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_XcptFilter
_initterm
exit
__set_app_type
_adjust_fdiv
__p__commode
_controlfp
_except_handler3
_exit
__getmainargs
__p__fmode
_acmdln
memcpy

gdi32

SelectObject
SetTextColor
CreateDIBSection

kernel32

VirtualFree
VirtualAlloc
VirtualProtect
GetModuleHandleA
GetStartupInfoA

user32

ReleaseCapture
EnableMenuItem
FrameRect
FindWindowA
LoadMenuA
GetCursorPos
IsDialogMessageA
GetClassLongA
InsertMenuA
GetWindowDC
CreateDialogParamA
GetParent
LoadCursorA
GetCapture
RedrawWindow
KillTimer

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ