fea9363c3eca08cd89dd598bbdec7a51_JaffaCakes118 | Triage

Sharing

General

Target

fea9363c3eca08cd89dd598bbdec7a51_JaffaCakes118
Size

128KB
MD5

fea9363c3eca08cd89dd598bbdec7a51
SHA1

67c819da2f2474fedb2a82ad1ad6c2424647735d
SHA256

62bde10368586411a0bc7ef642f311b32312e5dc4b5d412f33f621008cae18f6
SHA512

a0ba1a595c9e0d27e9495f1c23b3a347b88af0f01be89cdf469a80353ec0c58c262394c148e7d980ca08fd57dac4a94a1c039af58ef3db8f224fa57981cf9ec4
SSDEEP

3072:gdd2MU1453TpSJJD1LKnRWY7obiWdWtOtKAfWGN:q823TpSJD+xo2n2fWc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea9363c3eca08cd89dd598bbdec7a51_JaffaCakes118

Files

fea9363c3eca08cd89dd598bbdec7a51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

562f83274777b8d916d4892e72dafc84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

SetClipboardData
DeleteMenu
IsWindowEnabled
GetWindowRect
EnableWindow

gdi32

GetDeviceCaps
CreateRoundRectRgn

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
exit
__getmainargs
_initterm
_acmdln
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ