f595f533be3189b98ff7c4afb39b1f2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f595f533be3189b98ff7c4afb39b1f2c_JaffaCakes118
Size

273KB
MD5

f595f533be3189b98ff7c4afb39b1f2c
SHA1

db1bc00ef2b9141d838c28a8be3ac16003efaddb
SHA256

831b36929b95a9ae47a3a6d10f20f4e5d2db486f573e27aaa195c08a4f2a35cd
SHA512

3d2cd428c1a7b9b5507f9d54561e5995cadc5d5aa10c3841ab0fd826f09e9bce82ce78308c6ca2cc5c391ea24517b0240b36a1034135bc8ca04af01d0e315f6d
SSDEEP

6144:VSJu+iVWUhWnn22+FtzfyirnPvV4AXuEgMK/x204F7LToV1a:cJu+iVWUY22+FtvrXV4AXeMK/x204F7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f595f533be3189b98ff7c4afb39b1f2c_JaffaCakes118

Files

f595f533be3189b98ff7c4afb39b1f2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be76603ce86a1a87bd744b91bc245251

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetFileSize
LoadLibraryA

user32

ChangeDisplaySettingsW
OpenClipboard
GetWindowRect
CreateWindowExA
MoveWindow

gdi32

CreatePolygonRgn

oleaut32

SysAllocString
SysAllocStringLen
SetErrorInfo

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_strrev

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ