fbf5dac4f38bc8ac4d2fe5ab4265fb8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbf5dac4f38bc8ac4d2fe5ab4265fb8d_JaffaCakes118
Size

14KB
MD5

fbf5dac4f38bc8ac4d2fe5ab4265fb8d
SHA1

1d1538a8ae765efcc6cc55bfe7b5f390285af47f
SHA256

98e7707cb6343d94ded50e43853bcb132cb6a983396358dcc98a170ee01cfcf0
SHA512

0b876fd39033f303760f639f668555fbe67a5e95d7e507417eb0aa91d742dcabe657c737545231a28e90c2ff43596c8a084a3e0ca2739496ff1c7587914b0d8e
SSDEEP

192:TaNy4ToyBF7Inhpue9zQAHJCH3kP9pfZ7azDxykZc2vJHyMV/:TaNy2XNIh9zQA1dozD88cuJr/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbf5dac4f38bc8ac4d2fe5ab4265fb8d_JaffaCakes118

Files

fbf5dac4f38bc8ac4d2fe5ab4265fb8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

687c8de6d9a20cdfe45d88b5a3dd1e67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyIcon
GetWindowDC
SystemParametersInfoW

kernel32

Heap32ListFirst
VirtualProtect
GetLastError
WriteProfileStringW

gdi32

GetPaletteEntries
GdiGetBatchLimit
CreateMetaFileW
GetBitmapDimensionEx
SetPolyFillMode

comdlg32

GetOpenFileNameW
PageSetupDlgA
GetFileTitleW
dwOKSubclass
ChooseColorA

Sections

.text
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE