e9fa38cf1cbf13a551f4d875543722f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9fa38cf1cbf13a551f4d875543722f6_JaffaCakes118
Size

136KB
MD5

e9fa38cf1cbf13a551f4d875543722f6
SHA1

75e9672e2fc1e28ed751f6bb11bbda1aaa7decf7
SHA256

5fa2c2aaa3cb7639ac120d74dcd49521e8c782a8c9ec7944d8b897ff163bc8ac
SHA512

0b68be555092b448216327634c8f69161158fe0ba8116292d7375bf4d58cd81cd81a74d9eddee7c95b25859017eccb6753183c0ed71097b699c119c0f7613594
SSDEEP

3072:M/nbwQquXioSZQp2lTDaX5B8oeH5tToD3mK0hCcOo0:M/dqubSZQp86X5BQH/y2Eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9fa38cf1cbf13a551f4d875543722f6_JaffaCakes118

Files

e9fa38cf1cbf13a551f4d875543722f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d06686cf9c0c76b9d240e8d63fcf19c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

EnableWindow
DefWindowProcW

gdi32

CombineRgn
CreateFontIndirectA
CreateRoundRectRgn
CreateDCW
CreateCompatibleBitmap
CreateRectRgn
BitBlt

msvcrt

__p__commode
strcmp
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zsrmmms
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE