fb35e518c27857bd093d79027de80ffe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb35e518c27857bd093d79027de80ffe_JaffaCakes118
Size

264KB
MD5

fb35e518c27857bd093d79027de80ffe
SHA1

cfc30628399ed6cad67e9ce92981d225eacd49ff
SHA256

e6c815f8f0b6841eeace40834603dec04431c380b628c1773d15ed9f5827b2c3
SHA512

d8f91c5cffb7c2a358bc0d94f1991a0545b6eed7fa3de35d174606c480d458993b3b32844d75340ba7fa2047a344a0ecf7987028d2d538e3fd57129a57876f5f
SSDEEP

6144:5vxQo5+vEoUTyicl9pdFlnGQv4IeJsgllikv4AAVJFFoQILd:5vxQo5+vEoVlL/BGQg7JsgPikqjILd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb35e518c27857bd093d79027de80ffe_JaffaCakes118

Files

fb35e518c27857bd093d79027de80ffe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

52f46f037c93f8791132ffadd9c241ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
SizeofResource
LoadLibraryA
CancelTimerQueueTimer
LockFile
GetDateFormatA
GetProcAddress

user32

TrackPopupMenuEx

gdi32

LineTo
ExtFloodFill

Exports

Exports

qsmcabxcfologe
usoxlouetxmizjm
zcjktnevhhgkod

Sections

.text
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ