13f433aceadae6beea5d79aacc161196_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f433aceadae6beea5d79aacc161196_JaffaCakes118
Size

42KB
MD5

13f433aceadae6beea5d79aacc161196
SHA1

4f9d6d08b335d7d33c62ce95727485d8ea1458cd
SHA256

f98af9ba98167c459320025c376558f7e640a7802855789f545b976acceaf1e9
SHA512

9e4bc80546f6b2610f8d81965b642d4c65632eef56bd39c12807298518685d191dec0b302c87be73d07d75a0537ee884c70469ecc848b04bfbb58ed467e5f324
SSDEEP

768:R6dX34ELjp5fOw+K3EbZX79y92EDk1Fxq7:uPWwsbt9TEDk1Fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f433aceadae6beea5d79aacc161196_JaffaCakes118

Files

13f433aceadae6beea5d79aacc161196_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3065a0b15e0eb6375e6962d5684e0806

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
TlsGetValue

user32

ScreenToClient
ShowCursor
LoadCursorFromFileA

gdi32

GetMapMode
CombineTransform
SetDIBits

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ