fb0ab6b4749e653528e406777abda12a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb0ab6b4749e653528e406777abda12a_JaffaCakes118
Size

111KB
MD5

fb0ab6b4749e653528e406777abda12a
SHA1

de3a95493072c05889dab0316e268837f435754c
SHA256

9cd6106a4cc2b09214382c3e5677b41ea9c61b856bbc13bc5b935a91766648a2
SHA512

ff7d15800a8a6cf2eaafd9453a6b6ef7e295110d231fec7fb658b0c851bdff18ad33f4b7db9b24cca8179a68bc14ce9512b8ef323bad322c3ee77d58b3ab1f4f
SSDEEP

3072:we+04Ou5aLBpx7GoZKS3DsQ9gqsplZ5B2blHcbO:we1K5aVpx74IROHB2bpcbO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb0ab6b4749e653528e406777abda12a_JaffaCakes118

Files

fb0ab6b4749e653528e406777abda12a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1655465b53ad9e0f3e8f6fa692e1756

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
ExitProcess

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

SHAppBarMessage
StrRStrIA

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE