cf9ceaae0bf52bc6267ac380cdf1d5df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf9ceaae0bf52bc6267ac380cdf1d5df_JaffaCakes118
Size

144KB
MD5

cf9ceaae0bf52bc6267ac380cdf1d5df
SHA1

3bac0fd08dc7097368d12b9d09012cf01dc9d999
SHA256

bbd051a760208209f41530d53aa2c85d780231f91e9658b6ffde76d4390ff46b
SHA512

3922115c3635f048c49ac3c0b3db40f5a0628a8a726d84c5a098ab135e7a22608397ffd47eea8935ce768f3daf047b23b68d387d41ee3d71f61841c616c7e34f
SSDEEP

3072:SLxKFfE012H/TY0B6C7cCHTJFCDFs9CPOuEEq:axK9F12fTYn0cCzrCDFy5lEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9ceaae0bf52bc6267ac380cdf1d5df_JaffaCakes118

Files

cf9ceaae0bf52bc6267ac380cdf1d5df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e707b4863fd5a9ed57b053e52f311e6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
FreeLibrary
LoadLibraryExA
LoadResource
GetVersionExA
LoadLibraryA
GetModuleHandleA
DuplicateHandle
CloseHandle
FindResourceA
GetLastError
LockResource
InterlockedIncrement
IsBadWritePtr

user32

TranslateMessage
ScreenToClient
ReleaseDC
LoadCursorA
GetSysColor
GetDC
GetMessageA
LoadStringA
FillRect

gdi32

SelectObject
SetTextColor
DeleteObject
GetDeviceCaps
DeleteDC
SetBkColor

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ