f4e376b0e4e05965b8efb7d22b75cff5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4e376b0e4e05965b8efb7d22b75cff5_JaffaCakes118
Size

57KB
MD5

f4e376b0e4e05965b8efb7d22b75cff5
SHA1

5fd19f2fae00e32fd1c8eff49d5a3d5925b3d9ca
SHA256

1a2e466530774cee0d33b91637ccfa64409078cd068d8cbd3a15300fb1ad1884
SHA512

138e353094df0089158d3de5a6e66aa21c93318c64e8ead3c66af608bf06ae1e47370f5476efd700a009c4759da7c42971c3f82fd5489d5ac3726ea6136b9f52
SSDEEP

384:8DhwKeG5WhTWwd0tnd6H+oqYADnsYXnYl7ONAsnQ3CmKXO8OL:aoG5WtWwdwG+UArYl7O1n0iO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4e376b0e4e05965b8efb7d22b75cff5_JaffaCakes118

Files

f4e376b0e4e05965b8efb7d22b75cff5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea8550e9239ac8b90463ee7d048c80a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowOwnedPopups
SetFocus
OemToCharA
LoadIconA
LoadCursorA
LoadAcceleratorsW
IsCharLowerA
GetMessageA
GetDC
FillRect
DrawIcon
DestroyCaret
CreateMDIWindowA
CreateDesktopA
CharToOemA
wsprintfA

kernel32

FreeResource
GetCommandLineA
ExitThread
EnumResourceTypesA
EnterCriticalSection
RaiseException
SetEndOfFile
TlsGetValue
UnmapViewOfFile
lstrcpyA
lstrcmpiA
lstrcatA
OpenFile

oleaut32

OleLoadPicture
RevokeActiveObject
SafeArrayAccessData
SafeArrayCreate
SafeArrayDestroy
SysFreeString
SysReAllocString
ClearCustData

Sections

.text
Size: 22KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ