040fc53a54943775c794428c5ac2e7d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

040fc53a54943775c794428c5ac2e7d0_JaffaCakes118
Size

7KB
MD5

040fc53a54943775c794428c5ac2e7d0
SHA1

b6c3ecbb367e43c685955660c7678748c22de169
SHA256

e06a2ee04a6f96c63163e9c25667c924f1ccd45c081990383b7a2864529e519e
SHA512

ed6d6658fa876b67947502b8a6967b1eb21d82545232ec07736ae144edabbe0ad095c7cef8f932bdb11bd757d50b306795ac6df9ff129ce774760262ceb38ff7
SSDEEP

96:3zyRib3/mZVTycQR+oEr2hNn9MYWOF+Q9o/mYKizPtboynFHT:+Ib3ArQRUeNnHWOF+z+YKoP1oynFHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
040fc53a54943775c794428c5ac2e7d0_JaffaCakes118

Files

040fc53a54943775c794428c5ac2e7d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80384ffe472781b6debc7c783af3a576

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
QueryDosDeviceA
GetVersionExA
Sleep
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
ExitProcess
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA

user32

GetSystemMetrics
LoadIconA
IsWindow
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
FindWindowA
ShowWindow
SetWindowPos
CreateWindowExA
SetTimer
KillTimer
SendMessageA
LoadCursorA

ole32

CoCreateInstance
CoInitialize

msvcrt

atoi
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncmp
_controlfp

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE