12de0a37f825a40001810162279b2a2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12de0a37f825a40001810162279b2a2f_JaffaCakes118
Size

116KB
MD5

12de0a37f825a40001810162279b2a2f
SHA1

7370d94f7d49a4c48f2725fe951928320e57f881
SHA256

6c64637d95392c2a6ef9386baad06d47de7a4efc1ef75a6c4686b5b3bdbe6b98
SHA512

852ea82fd09be16026e95fa10aff88a80f639d218474bd146fe50486642690f599db4f57da658b4d4d5781423f677fc768e90af4cfe47d28167ace1991bea6b7
SSDEEP

3072:2HjbKp+QXb2ixmcsBUqsqPIKAqNUs99iXdzi/JnKaBnhsXB/d7:+bg+Wb2wsqKI3qCe0d6jnhcX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12de0a37f825a40001810162279b2a2f_JaffaCakes118

Files

12de0a37f825a40001810162279b2a2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

174ce62253aca9eb1a244d412d1812e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
CreateThread
GetModuleHandleA
Sleep
GetStartupInfoA

user32

FillRect
MessageBoxA
DefWindowProcA
PostQuitMessage
KillTimer
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
LoadIconA
RegisterClassA
CreateWindowExA

gdi32

CreateCompatibleDC
SetTextColor
CreateSolidBrush
SetBkMode
DeleteObject
SelectObject

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
strlen
_except_handler3
memcpy
memset
??2@YAPAXI@Z
getenv
sprintf
malloc
memmove
_exit

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ