fb83c2ee04174a8784f1e32b1352fcf6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb83c2ee04174a8784f1e32b1352fcf6_JaffaCakes118
Size

281KB
MD5

fb83c2ee04174a8784f1e32b1352fcf6
SHA1

03d5cbef6d566d93a63e80019557afffc096b6e1
SHA256

7b42eeb1c9b9f0f74ffce71c78da980ea42d701e238437b594490eb39d2946de
SHA512

4a239b1c93e170da73f2ffc23ad01dd6040878d3cbb8308e391b65d57a23a6b3bcca47facebb2f09e1e1baed5735c1d9b5f3d4a9dde9d85a9a2798ff6f850ae1
SSDEEP

6144:nQmumIQSNs3IDVpTxTpHnuIhf9dcawxkTG4:nQmInXDVrTBuOf9ej4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb83c2ee04174a8784f1e32b1352fcf6_JaffaCakes118

Files

fb83c2ee04174a8784f1e32b1352fcf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd06445148cb16b4a5b839014769331a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EnumFontsW
CreateDCW

user32

MessageBoxA
DialogBoxParamA
EndDialog

kernel32

ExitProcess
GetCommandLineA
CreateThread
ExitThread

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ