40be43d13599123c359fc7876c528d70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40be43d13599123c359fc7876c528d70_JaffaCakes118
Size

152KB
MD5

40be43d13599123c359fc7876c528d70
SHA1

b02db713be719c68f600d60e8b138e450b1a6a74
SHA256

e7f2db1036f618c823c7519ef1e3899363eb630d444645d59e81d586b92290bd
SHA512

c7673244fca7ae6575652de64bf090bc8ccba8cd7d239b3166808cc8de85e75e0a77091cc565bda000653908894227b0f789aa58fdb500f5b95423755d3ebfcb
SSDEEP

1536:RYTf7GtpY6yXnU1i6SstYJ91BOLas5r/7WyWwzP:Empr0EiTst+1Q/h/7fP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40be43d13599123c359fc7876c528d70_JaffaCakes118

Files

40be43d13599123c359fc7876c528d70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4044195db86d2e107dffa5c37dfcc5c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsAlloc
GetModuleHandleA
GetLastError

user32

ScreenToClient
LoadCursorFromFileA
ShowCursor

gdi32

GetMapMode
CombineTransform
SetPixel

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE