567942c20f406f870151d5b687bfd7aa_JaffaCakes118 | Triage

Sharing

General

Target

567942c20f406f870151d5b687bfd7aa_JaffaCakes118
Size

698KB
MD5

567942c20f406f870151d5b687bfd7aa
SHA1

a2e92d6dd4c971ac3c1ce8082fd8a8bd3097c830
SHA256

c02efa90c0834c4663a10a591febb5a68f39ce656a3690fa736981083c5e88e3
SHA512

6fe5c2cdcd6dd89be9857b1a44de43b8d45895bcb3b1d7c915c5263a87d425be10e8c820f0015287692e04c6e108e49419bcd8ba1ffdc2c849081ce34133ae34
SSDEEP

12288:RqQ49prifBRCbGjEYPlsLHWqeWGkBcEu68RH/FCzA48Q:E3qLCytyCO1BcXhf0zA4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
567942c20f406f870151d5b687bfd7aa_JaffaCakes118

Files

567942c20f406f870151d5b687bfd7aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3f0c3a4f90f3f4e205b62ba06fe93df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetLastError

msvcrt

wcslen
exit
__CxxFrameHandler
_controlfp
wcstoul
_acmdln
memmove
__set_app_type
__p__fmode
__p__commode

gdi32

GetStockObject
SelectObject
GetDeviceCaps
GetTextMetricsA
LineTo
CreateFontIndirectA

user32

DestroyWindow
CreateWindowExA
EndPaint
GetWindowRect
BeginPaint
GetMessageA
GetSysColor
ScreenToClient
EndDialog

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ