fa1318eb0161218b11ed49661bfc76e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa1318eb0161218b11ed49661bfc76e0_JaffaCakes118
Size

118KB
MD5

fa1318eb0161218b11ed49661bfc76e0
SHA1

34197bc47c59328dc6bb5b1eb2379c8c3f2fd49c
SHA256

4153fc211117e64844b766cc9a2b839ccd4b078aefedc56c9e333530d50f805c
SHA512

5c6f79e0d20c5a4a0a9fc87c596acdd78bf9c9a23d1f92496c2220b89d29afb762535d5dd397aef0b1c538f41bd5da20e54488dc4713cf229c1c766c7d80a494
SSDEEP

3072:xeISwY+zhDbvqWcEoKMuMJy1+Mwjod1M2:xXSUlvqf07wjgt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1318eb0161218b11ed49661bfc76e0_JaffaCakes118

Files

fa1318eb0161218b11ed49661bfc76e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE