fa14cc51b526936c7c9093c0f824f773_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa14cc51b526936c7c9093c0f824f773_JaffaCakes118
Size

60KB
MD5

fa14cc51b526936c7c9093c0f824f773
SHA1

a942f77118207061e6898a9a787df4e38d5e105c
SHA256

75458b8b24c5cd204ceef4bd37c9e9ec718a1cbda4b0acf4c39cff566a62e5df
SHA512

5e164f4be2c328e06c3a1bfde2c6005f4ae01fdba02a3fbc8ceb1e128126185a4bb403302336975d0e2cc172660feea6c4b3aac1034ba67fb408201a2130d39b
SSDEEP

768:RNdLLKW7CwWk+isQIRQIGG045EcM7WHLoTtEGjurfpHDenwor7QMnlTyR06RVG0T:j7MQOQxOoTtmrhMwojQO6bD7zRkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa14cc51b526936c7c9093c0f824f773_JaffaCakes118

Files

fa14cc51b526936c7c9093c0f824f773_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edbe419a9741fe73ab659b9676ab1df1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitThread

user32

CopyRect
DrawIconEx

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ