fa3060ac7bb2e972713017ed22c6c70b_JaffaCakes118 | Triage

Sharing

General

Target

fa3060ac7bb2e972713017ed22c6c70b_JaffaCakes118
Size

102KB
MD5

fa3060ac7bb2e972713017ed22c6c70b
SHA1

cc5c1a1a58a88f59242a3de759b9e11fe164c9ce
SHA256

8b0973306a522e9ab171175a727e7817c23052822a20c49e3b7c36153a809081
SHA512

b1b64f238cfedfd6d30c451031129b48424db8a8de6ee1cfc3d0a4f066a22550f3a5ad426163d164eb44fc0ba780780fe442c5ee7af72adf87ff3df1ce694f2d
SSDEEP

3072:csZHuemFMuqi7lVOxJVmr54FUgJIRaidFB/bS:jHuVMZOlkUNTHfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa3060ac7bb2e972713017ed22c6c70b_JaffaCakes118

Files

fa3060ac7bb2e972713017ed22c6c70b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ad1ace033d346667469cc0398fb66d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetThreadDesktop
DialogBoxParamA
GetActiveWindow
GetWindowThreadProcessId
GetScrollInfo
SetDlgItemTextA
MessageBoxA
IsCharAlphaA
SetWindowTextA
EnumDisplaySettingsA
EnumWindows

ole32

CoGetCallerTID

comctl32

ord17

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetTickCount
GetHandleInformation
HeapDestroy
GetDateFormatA
GetUserDefaultLangID
LocalFree
IsBadWritePtr
InitializeCriticalSection
GetTimeFormatA
GetStartupInfoA
GetLocalTime
SetFileAttributesA
LocalAlloc
LoadLibraryA
FreeLibrary
GetProcAddress
IsBadReadPtr
HeapAlloc
ExitProcess
HeapCreate
GetSystemDefaultLangID
DeleteCriticalSection

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ