d1c89f8abfdd5e91a86b2ab44177b7c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1c89f8abfdd5e91a86b2ab44177b7c5_JaffaCakes118
Size

118KB
MD5

d1c89f8abfdd5e91a86b2ab44177b7c5
SHA1

8bdd9322ea00a4b409ed7c0e5b1d550fafdebde5
SHA256

e78002f8c44fe7c8d7817bcf8557446a27470f9dc29a9aae2ad351e688633ecc
SHA512

fe126375a0007d7a277df6cd15a0cf19ecff06412e9b133e20bbf36608e1c975407d5882862382237e38cffd13331cc2bf820eac45c153c4137c5ca29e85953e
SSDEEP

1536:7vdQ69zt52ci0KTU8aW1jVcPHTnM7hT8+18UT7P6Vk6r/t66Cg6tfsjl+lypLzuM:7aIt5Y0K1aWdVmqTn8UvixS1F1ZgKM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1c89f8abfdd5e91a86b2ab44177b7c5_JaffaCakes118

Files

d1c89f8abfdd5e91a86b2ab44177b7c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47db72c5fe139813bc895e3dcf21f3e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA
FindFirstFileA

user32

DrawTextW
GetClientRect
CloseClipboard
ShowWindow

gdi32

Rectangle
CreateSolidBrush

msvcrt

__setusermatherr
strcmp
strstr
strlen
_exit
_XcptFilter
_controlfp
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ