fb0f73d70c35682d9ad6c45ceb36d743_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb0f73d70c35682d9ad6c45ceb36d743_JaffaCakes118
Size

11KB
MD5

fb0f73d70c35682d9ad6c45ceb36d743
SHA1

6f08de9f41187e5ee6101f2a9f0882b24e760e74
SHA256

97e3add7cf3f6e0052e99bc39a40454c96042d4cde0a1ccd4699f1beea3941da
SHA512

b491d3f12d32a864e5c03fd74a845efe13085394c29d2880fe750e7662d75be6e7f4ba79a063127372d8250a3da7969822bc4d57d1893746a3352e3b80687375
SSDEEP

96:fnTMNF4mw34W8UTkLT08qRRJWS8BU2qpOuq/PxfLV6aH53j3FLWPhG4G:vwHVw3p8UTkkhHyqQThAc3ZCJG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb0f73d70c35682d9ad6c45ceb36d743_JaffaCakes118

Files

fb0f73d70c35682d9ad6c45ceb36d743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99d01331e864d38483c79cb53f4e625b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SetCapture
SendMessageA
ReleaseCapture
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowRect
GetParent
PtInRect
GetDlgItem
GetDlgCtrlID
GetCursorPos
GetCapture
GetActiveWindow
EndDialog
DialogBoxParamA
CallWindowProcA

kernel32

lstrlenA
lstrcpyA
WriteFile
SetFilePointer
RtlMoveMemory
ReadFile
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
CloseHandle
CopyFileA
CreateFileA
ExitProcess
GetFileSize
GetModuleHandleA

shell32

ShellExecuteA

gdi32

SetTextColor
SetBkMode
SelectObject
GetStockObject
GetObjectA
CreateFontIndirectA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ