ea749825dbeff15b30a733c4505514fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea749825dbeff15b30a733c4505514fb_JaffaCakes118
Size

152KB
MD5

ea749825dbeff15b30a733c4505514fb
SHA1

983cf7614bccf1f9dc736912747ec2cd3f5e3627
SHA256

498cea45e4cd6ee432e71943548de2861e75062b5d1e4101da66d14c515004b4
SHA512

c3c8e3f1c13ffeee3b6df6fb8fd62f2a96c26f224aa862d47e1d3960bd8d7132df131a3d0388756ad8efd6464284221b19ff7dfd4b8e38bd3bdbff0c827c2025
SSDEEP

3072:TJjlBdwsu7LTaoczAyTB316K9VeHgH/cnAIEm8WfLMKI2esSnXDlzMV:TJjTqD/Nc0yT7AH+cAIEm8OMKzeZnXDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea749825dbeff15b30a733c4505514fb_JaffaCakes118

Files

ea749825dbeff15b30a733c4505514fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be7718648d9910d55139e46daf84099b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

CloseWindow
ReleaseDC

gdi32

CreateDCA

msvcrt

_adjust_fdiv
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
__getmainargs
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE