1323dae131c3e4df343ee33e246791ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1323dae131c3e4df343ee33e246791ab_JaffaCakes118
Size

76KB
MD5

1323dae131c3e4df343ee33e246791ab
SHA1

859eaef73a500fab073014b0a2a2b2b28c05c75f
SHA256

ae8b42d99fd6085169aa00e49b01b3b3e37d47c7262bb7fbaec72a50805865e6
SHA512

4ed3a78289dc64f5f0a0b8bd81863a0bd3d806eb79c379109733ef836866799fa24369aa1354743be7df7416159ebc2cb7eef1c2e5c8c0814d9dc6b849f76413
SSDEEP

1536:zU7jYwQj0MKyTUO2DjpQkUt5Ekr4R54si5yTIVsO6vt:MYZ16JQoksXm5yTOx61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1323dae131c3e4df343ee33e246791ab_JaffaCakes118

Files

1323dae131c3e4df343ee33e246791ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fad31f70781a255567bb4e12d45470a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
HeapAlloc
GetStartupInfoA
GetModuleHandleA
TlsGetValue

user32

LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
GetMapMode
SetDIBits
CombineTransform

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE