dc9808ec301d48798d7fc7d6c780b353_JaffaCakes118 | Triage

Sharing

General

Target

dc9808ec301d48798d7fc7d6c780b353_JaffaCakes118
Size

220KB
MD5

dc9808ec301d48798d7fc7d6c780b353
SHA1

4a3c96dd90d592117d824cf0d5ef7d5db57f8404
SHA256

7b645020f4f2141da76a468418f842faad70a96b53f50aac3d97260c1cefc984
SHA512

db83c170963ae33fbe0afd0c82febe08e54333f5396bce18aaa263b297398f01d0c8aea32149d6db1b4fc36bd8fb45526d96417d2d8bc0422b80a51ddf8215aa
SSDEEP

6144:K11iQqAaPl++vJdLzXxDMmM9fl71FQ1RXvU:c1iKaPlNdzhu5x1FQRXvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9808ec301d48798d7fc7d6c780b353_JaffaCakes118

Files

dc9808ec301d48798d7fc7d6c780b353_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9046195eb042c49fc6c2e8339142a91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

EmptyClipboard
GetDC
CloseClipboard
CreateWindowExA
ShowWindow

gdi32

BitBlt
CreateCompatibleDC
CreateFontIndirectA

oleaut32

SafeArrayCreate

msvcrt

_initterm
_controlfp
_except_handler3
strcmp
_exit
__set_app_type
exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ