fa453cccae5a8b4d87c87737b3a750cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa453cccae5a8b4d87c87737b3a750cf_JaffaCakes118
Size

55KB
MD5

fa453cccae5a8b4d87c87737b3a750cf
SHA1

426584d36438318c5433e6f0668d7f0d2f668112
SHA256

c187e92061a696cbe3480561f35c97d79c369fce0cfd56a27fbfd541d4ec75bf
SHA512

2cd93d3aa9a11827ed0e984d7a6324b18f000e3598cdccd547b4f391639984bdbf8552ad7298225db970bca172f0a24d8dd45a9976f3e3bc24cb9783901cdabd
SSDEEP

1536:waVrIbZx2juuehujmU7eQ2DETlhlW85GDBcsp:waKdsjPWuR2DERha1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa453cccae5a8b4d87c87737b3a750cf_JaffaCakes118

Files

fa453cccae5a8b4d87c87737b3a750cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE