f0a8ddd26487261bef633e0f596699f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a8ddd26487261bef633e0f596699f5_JaffaCakes118
Size

144KB
MD5

f0a8ddd26487261bef633e0f596699f5
SHA1

03c658ec1ea25b44dddcd469aac286dc64566d2f
SHA256

65dfd9b5b9708e183802bab7daae65050e7bf783ff3e056cfc9728459afc8cb6
SHA512

774dcd06382d1257af875e9729ce95166ccde8d0653aa26a7c49dd7103c10dcb278a5dcd6137bce797e3b1d6f1cf737c3a3ec9d8eba27588ca43d7fa9ad44a00
SSDEEP

3072:V7GeKlHrSvQ0tRpSFsOTHHrdT+cT3B0DBpq7qZ2o2LlmSbReH:Vvsr6HMZHkDBZZ2bLlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a8ddd26487261bef633e0f596699f5_JaffaCakes118

Files

f0a8ddd26487261bef633e0f596699f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b59bedf0c28781f157b9b450c0026ffa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualProtect

msvcrt

fwrite
strncmp
wcscmp

user32

SetCapture
FindWindowExA
SystemParametersInfoA

comctl32

CreateStatusWindowA
InitCommonControls
ShowHideMenuCtl
CreatePropertySheetPageA

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ