f4fb650fbc6c44ff4844d9a51daae125_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4fb650fbc6c44ff4844d9a51daae125_JaffaCakes118
Size

37KB
MD5

f4fb650fbc6c44ff4844d9a51daae125
SHA1

29d0e586522e45f7fc293b467df5bf020b3e328e
SHA256

60fb35036ad6e53d9dcf1a2e091cc88b5fde8c03c6229c522bc83df0176e7d7e
SHA512

decfa3ac9282b2f4d704512e5956f01d6b907d587a77a8001e405904c25f0da655221b5dbcb80351ea8ce9bc677aaad99b15eef9bacf9fe860b11ffe5d4c20ec
SSDEEP

768:W3+WxLWlJlFhxoreAT7NMqUsc0V7lZ9kMH:h0qlRhxvA3NM5z0V7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4fb650fbc6c44ff4844d9a51daae125_JaffaCakes118

Files

f4fb650fbc6c44ff4844d9a51daae125_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1488b75050be85eec0ba7060b7341e5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileExA
GetLastError

user32

CreateMDIWindowA

Sections

.text
Size: 23KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jnpz
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE