fdae808741d904f31104921564ea7be5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdae808741d904f31104921564ea7be5_JaffaCakes118
Size

32KB
MD5

fdae808741d904f31104921564ea7be5
SHA1

77c70e2d0d83f3a277f80a2379fd92d79c8a0e38
SHA256

a242e292c894cfe650d379f8d016993a425387feb1cfac9ad395f132e3a6dcb1
SHA512

3debbd4b57d418fa56db8c3426fefc3774ed977e59783aa7cb7948a57a47191b0e08bba78cbad93913339be107be42107053446ba178bf1a7b51706c1309ae4e
SSDEEP

384:QIHHdQopJB/kGM4YoUpU0aY8P0ltaGX3xwiUijd082BZ4ZUyDCDNhWuogI:Q7eB/hM/zdGAX3P59JDCDNh5ogI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdae808741d904f31104921564ea7be5_JaffaCakes118

Files

fdae808741d904f31104921564ea7be5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b662cb8f3ca53b1d978574e6fb7c8f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyCursor
EnumDesktopsA
UnregisterMessagePumpHook
ClipCursor
ShowCaret
IMPSetIMEA
SetLastErrorEx

kernel32

GetLastError
VirtualProtect
EnumerateLocalComputerNamesA
IsBadStringPtrW
GlobalReAlloc
EnumResourceTypesW
DeleteCriticalSection
SetThreadIdealProcessor
HeapCompact

gdi32

DdEntry8
GetEnhMetaFileA
GetRelAbs
GetKerningPairsA
RestoreDC
AddFontResourceExW
DeleteObject

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE