f9d3fdf2bf07e360f0075162d9061aeb_JaffaCakes118 | Triage

Sharing

General

Target

f9d3fdf2bf07e360f0075162d9061aeb_JaffaCakes118
Size

57KB
MD5

f9d3fdf2bf07e360f0075162d9061aeb
SHA1

675565b0cb5f5b33261d73a9a8cb573b01f63ea6
SHA256

0f67707bc86c936be3d9e37eb9cc36437d1665d13425f75b64e1c493b2876b2b
SHA512

8f912d41cc6566dfe74eca83cc4094a3e0fa4f5ca6a842c7f7d0fbc8529569445a085cd84f637b4c95ebf4072216f86537b4d2cab8b02cf50af7b94e3e53f45e
SSDEEP

384:8DhwKeG5WhTWwd0tnd6H+oqYADnJYXnYl7ONAsnQ3CmKXO8OL:aoG5WtWwdwG+UAkYl7O1n0iO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d3fdf2bf07e360f0075162d9061aeb_JaffaCakes118

Files

f9d3fdf2bf07e360f0075162d9061aeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea8550e9239ac8b90463ee7d048c80a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowOwnedPopups
SetFocus
OemToCharA
LoadIconA
LoadCursorA
LoadAcceleratorsW
IsCharLowerA
GetMessageA
GetDC
FillRect
DrawIcon
DestroyCaret
CreateMDIWindowA
CreateDesktopA
CharToOemA
wsprintfA

kernel32

FreeResource
GetCommandLineA
ExitThread
EnumResourceTypesA
EnterCriticalSection
RaiseException
SetEndOfFile
TlsGetValue
UnmapViewOfFile
lstrcpyA
lstrcmpiA
lstrcatA
OpenFile

oleaut32

OleLoadPicture
RevokeActiveObject
SafeArrayAccessData
SafeArrayCreate
SafeArrayDestroy
SysFreeString
SysReAllocString
ClearCustData

Sections

.text
Size: 22KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ