172b0f753ad328bc02094775fa810d71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

172b0f753ad328bc02094775fa810d71_JaffaCakes118
Size

95KB
MD5

172b0f753ad328bc02094775fa810d71
SHA1

d0aba49c6598de32f08ee0ef9477610835a2c303
SHA256

662868b5660243e579eb6b6a6ef588625fc83fc3a26aaa61ee1375b184a41ee1
SHA512

d68c5cb9073055bc14d851f0c066c4cd53abc0493aaeef5252df292eae8e44f307c28fde62deebc293169a25661cc60a4edf7ee2f45ebcdb1213b1bb645ee435
SSDEEP

1536:cdngTN96oA2G69YhmbgaROgLGfLF8/Ua2hARKJmh3a6ME0GgBRyh3xwpzJOBDp5:cdAN96oALYq6bLGp8/HWGKqBMUh3xw1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172b0f753ad328bc02094775fa810d71_JaffaCakes118

Files

172b0f753ad328bc02094775fa810d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c70c57bc1353769826bf010a73be84e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

BeginPaint
CloseClipboard
CloseWindow
DefWindowProcA
CreateWindowExA
CreateWindowExW

gdi32

CreateDCW

oleaut32

SafeArrayCopy
SetErrorInfo

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcmp
_exit
__p__commode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ