db247685dfcd010b811e238d9628e085_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db247685dfcd010b811e238d9628e085_JaffaCakes118
Size

85KB
MD5

db247685dfcd010b811e238d9628e085
SHA1

9eb78b0ff8b8b9af7c51fded7bdf873dc84a2726
SHA256

d43ed3a5b70c334d52227326aa2ba6d4b540b3fc2e9b2095f426dc3943a154ce
SHA512

e76cf69042783d068472c3e45b34436873a9d6669bac173d2e0b5983382de0ea2bab6f1987893a7117ef0a048a6ab285ddd2d2e02329acabd774f44053943ec0
SSDEEP

1536:oVrj8b5wBGkrssokPzkEuGsqn+qPCB4BbePrcQUMWRoUL:0joAgsokwEuGpn1vBb0rZBUL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db247685dfcd010b811e238d9628e085_JaffaCakes118

Files

db247685dfcd010b811e238d9628e085_JaffaCakes118
.exe windows:1 windows x86 arch:x86

79456b52377298d7b308edc02783f9e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetStartupInfoA
GetModuleHandleA

user32

AdjustWindowRectEx
AnyPopup
AppendMenuA

msvcrt

_initterm
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 161KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ