55833040135fede3a22044e67b469d0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55833040135fede3a22044e67b469d0c_JaffaCakes118
Size

43KB
MD5

55833040135fede3a22044e67b469d0c
SHA1

c6bd025d433f2ea7bfb1d3f48bf0354c11e6d77c
SHA256

bd0d5ab3c57156a51f25519c4a8f60d73da6190c47ebe935de75ac19138d9289
SHA512

015e9f78b32991598093bb19e515343635a8bc582fd3e04224b9467a4da33467960faabf53064c68eb46e4ace79a5e4b894494bc4484cf5729ea943366f83230
SSDEEP

768:8wWEUS7cYrO+9nfhXJ4cZoHDDu/OxazcJ+34oSUrM:+SQKO8nfBH2HPumAzcQ3+WM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55833040135fede3a22044e67b469d0c_JaffaCakes118

Files

55833040135fede3a22044e67b469d0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

524c8cf63fdcc20ea42ab377ca63a480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsAlloc
GetModuleHandleA
GetLastError

user32

ScreenToClient
LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
CombineTransform
SetDIBits

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ