ea24458b7acbc713adb19da5039e1eee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea24458b7acbc713adb19da5039e1eee_JaffaCakes118
Size

256KB
MD5

ea24458b7acbc713adb19da5039e1eee
SHA1

c5064442e93cd8f5e6088e562e4ff3613cf9a74a
SHA256

344904a98083c5c40a7b93a670d0f7f54476395802bdccaa7eaf3e9c035611a1
SHA512

2854b095df58c30a4082f2e1d4b7c728f4ec9cce18b9dc7dd946bcc127772db0d49302f6b92e3b53a51d9aca31e06f4a3a2ada06aa91501fc2e57430056d929b
SSDEEP

6144:PFhHGZl9e6SSRD5IHZ1MW2PTFbn/kLr94LL:tdYe6SSR6gWYk8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea24458b7acbc713adb19da5039e1eee_JaffaCakes118

Files

ea24458b7acbc713adb19da5039e1eee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e447cdb8a991b9c3cebec0b5a70a30af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

EnableWindow
IsWindowEnabled
EmptyClipboard
GetWindow
GetWindowRect
DefWindowProcA

gdi32

CreateDCA

oleaut32

GetErrorInfo

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
__p__fmode
_acmdln
__getmainargs
exit
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ