fbe738b77206a3fbb33229ebd596da8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbe738b77206a3fbb33229ebd596da8d_JaffaCakes118
Size

488KB
MD5

fbe738b77206a3fbb33229ebd596da8d
SHA1

11a7d7fa51d4cffff6e197102096056deeafa6fb
SHA256

408b317e6fb87963c97c398976e4e581a5f119d3508316a4e2d81fd9528b052e
SHA512

0bd76ee7bd55452f6497e63d603bc81b0644efca8bbf67db4db03288fa82fb2f844565e23bfa3e074c5720419d24206a7fea53403f5fb9a647b18f99475d525a
SSDEEP

12288:ZiwQ9lQJiqtyyFKTkO8VWRlhvrQ7+Hlc2GWNt:tQzQJiqtyVkOjdTdczW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbe738b77206a3fbb33229ebd596da8d_JaffaCakes118

Files

fbe738b77206a3fbb33229ebd596da8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

408c3125e0be42313fb4cd50e467dade

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlNtPathNameToDosPathName

user32

GetDialogBaseUnits
GetMenuCheckMarkDimensions

kernel32

GetVersion

Sections

.text
Size: 480KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE