527ca3bee0dc613f59c5140842953920_JaffaCakes118 | Triage

Sharing

General

Target

527ca3bee0dc613f59c5140842953920_JaffaCakes118
Size

35KB
MD5

527ca3bee0dc613f59c5140842953920
SHA1

a614dc3742e158fd7b48f1c405a3ddb64e321718
SHA256

9781a78b163acb65050bf3e3e25c56ee8ec19fd9e8b4b42859420b861af19f69
SHA512

383202d8456762a2272d2059c6e88338a2c5528b8322bbaab9411429a826421cca1bc6b53766ef84ba9b65d6e3456b33a93de789b51c2bc6ab5670a3237cdee6
SSDEEP

768:0KEiysGLJwtUQU+RK0IhwW4pRQJYMk55J9ous+d0sVNGT2XihiwQHo5e7zNE5iCC:IirA4UQU+RK0WP4pRQJ5k55J9ous+d0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
527ca3bee0dc613f59c5140842953920_JaffaCakes118

Files

527ca3bee0dc613f59c5140842953920_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f9e95f9db59de9e95416835d48a17dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
GetWindowTextA
PostQuitMessage
EndPaint
GetClientRect
BeginPaint
DefWindowProcA
SetFocus
LoadAcceleratorsA
LoadStringA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
SendMessageA
ShowWindow
UpdateWindow

kernel32

GetModuleHandleA
GetStartupInfoA
SetLastError
GetCurrentDirectoryA
Sleep
GetLastError
LoadLibraryA

gdi32

TextOutA

msvcrt

wcslen
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fgetc
fflush
fputc
memcpy
memset
wcsncmp

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ