fca12c32fcb25555e2a37b240386baa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca12c32fcb25555e2a37b240386baa8_JaffaCakes118
Size

293KB
MD5

fca12c32fcb25555e2a37b240386baa8
SHA1

26d4c2598f64c5ff1f0f7e376bc37447eb1ab766
SHA256

6ad389b1a7ff5b4da5d143ffe34cf5d60cfefe0951d0ded757c20e38efd3dbb5
SHA512

7377ec6ac0368839093a7bc0523cc3cd334c583b58a9960b83e700fcd4330391f686844a8cd69b6cfe4c9366fa9da6e3aadee39d902cd5971456930849fe66cd
SSDEEP

6144:+cfn/eV9ekbmgMV58hqvBqi/LHkemiUG:JGrekq/58AvoiDj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca12c32fcb25555e2a37b240386baa8_JaffaCakes118

Files

fca12c32fcb25555e2a37b240386baa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aea150ddce1a325322e9e0ac8eeef116

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

shlwapi

StrStrA

kernel32

GetProcAddress
lstrlenA
lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE