fb49c04c2f40e647da5da47cbad6c9a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb49c04c2f40e647da5da47cbad6c9a1_JaffaCakes118
Size

484KB
MD5

fb49c04c2f40e647da5da47cbad6c9a1
SHA1

bdf6d7f9da579b5325b0b1e3c949371f2eb701c6
SHA256

8533765b4f0916ffdc08156e8867506cadfc76ffda3c20d5295cd341fb86e832
SHA512

b93a5cd9e68771193e3cd0dbaf884bbf1123afd09b78950f4ff9f348474b3f7c92f4bd34cef0dea4b1d9b998e9a4a201eb712b5beca11d2a619d4f364bde9a1b
SSDEEP

12288:CAEM6vMOnpx04T8skwIgmE9OEIt1sNBDYvjElC6sUW+SwT:zHsTn44T8skwItE9OEIt1MuElC6sds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb49c04c2f40e647da5da47cbad6c9a1_JaffaCakes118

Files

fb49c04c2f40e647da5da47cbad6c9a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa33244d1665747afdb3ba5743208ea0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleRegEnumVerbs

ntdll

ZwSetInformationDebugObject

kernel32

GetThreadLocale

user32

GetInputState
GetCursor

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE