cf1680e673bec665b9beca4e8c854553_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf1680e673bec665b9beca4e8c854553_JaffaCakes118
Size

175KB
MD5

cf1680e673bec665b9beca4e8c854553
SHA1

fc13eb13f0fd83ecb3f171b6f396baf8928d0048
SHA256

b52d1e0e920205c6e6a379a728c9f44b02c9801fb291d70a0a2f19f9b16c766e
SHA512

3cf3f0030cf5c1e7f8fe8654161db89316badbe7fd6fc0f7f6b50f2b0eb530a90c1c377dd487ce56552369547ecadca7cf4faa059c207ba417bfea176bd567e0
SSDEEP

3072:GbVAQh5jfVIuGqlnD1Ge5j2v66gTHe/dfsMzOM7cL6P3jrCCdND9:sqQD69GnD1G4jeaTIqMG6P3Ck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf1680e673bec665b9beca4e8c854553_JaffaCakes118

Files

cf1680e673bec665b9beca4e8c854553_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c3da71c92fcef12a38e2c8967be85f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
UnmapViewOfFile
MapViewOfFile
GetModuleFileNameW
EnumResourceNamesW
SetFileShortNameW
FindResourceExA
FindFirstFileA
DuplicateHandle
FindClose

winmm

timeEndPeriod

user32

DestroyMenu
TrackPopupMenuEx
ClipCursor
RedrawWindow
CreatePopupMenu
FindWindowA
GetDesktopWindow

rpcrt4

NdrComplexArrayFree
UuidCreate

shell32

Shell_NotifyIconA

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ