11cf923bebf4f982d87e820aee7e99c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11cf923bebf4f982d87e820aee7e99c7_JaffaCakes118
Size

693KB
MD5

11cf923bebf4f982d87e820aee7e99c7
SHA1

98bff239f98ba4b57bd8ceeed85379a06c58823e
SHA256

0a1ac749c6bc253fee54ef17d5d7dd544f10c391a5b0a58c1abbf38e1f588fbe
SHA512

d9ae7cee4279ffacda4816ecf2f06b05d9c72076e8a0e1ecc81a6f1efce8ede5f949d771b301814f740f3f6133844e65b240d52a768950871cbd6b2feb25aa09
SSDEEP

12288:R60cAzN2SkQSQxXJSpSfkqWH1M49Wp4HnMybpLQSqEFXCuBKw8mqE0A0:RjN2S4QHSpS8HH18p4HnM6ZQSqEFXCGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cf923bebf4f982d87e820aee7e99c7_JaffaCakes118

Files

11cf923bebf4f982d87e820aee7e99c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80eb35dc9878f71deffc64624da268a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
GetFileSize
GetLastError
FreeLibrary
lstrcpyA
GetTickCount
GetVersionExA
Sleep
LocalFree
CloseHandle
LocalAlloc
GlobalAlloc
GlobalFree
GetModuleHandleA
lstrlenA
lstrcatA
GetStartupInfoA

msvcrt

__set_app_type
wcschr
__getmainargs
_except_handler3
__setusermatherr
_acmdln
wcslen
toupper
_XcptFilter

user32

ScreenToClient
LoadIconA
GetWindowRect
GetClientRect
GetFocus
SetWindowTextA
DefWindowProcA
TranslateMessage
DestroyWindow
SetFocus
PostQuitMessage
MessageBoxA
ShowWindow
BeginPaint
GetSysColor
CreateWindowExA
DispatchMessageA
DialogBoxParamA
GetMessageA
EndPaint
EndDialog

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ