fa835d1bff07f2ef7abe4fe74c4dae4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa835d1bff07f2ef7abe4fe74c4dae4f_JaffaCakes118
Size

18KB
MD5

fa835d1bff07f2ef7abe4fe74c4dae4f
SHA1

b774c1abf54fda4aa80b87f2c0374a53db7bd949
SHA256

ebd51e3c911bfcfba46b41a0c8d1ffc9bc0cee9f5870e6988bb37b49e10e68f4
SHA512

71baf6ff71c16fb92f224a3d2f187701bc3cb3e1d1d54961ba9b3a1fb70a0bc6647c8ed5e8c75ef1f8dd6aa68cb8faadb9698dfcd6d487532c8cb2551b70fcee
SSDEEP

192:tPPmfv8pTEEV9856awgQV6XXmjhdBzqS13llvaIuLHqQv2g//QkMQSDARRniE:tmfv898Ip4X4zqG3jvxumQ+S/QXg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa835d1bff07f2ef7abe4fe74c4dae4f_JaffaCakes118

Files

fa835d1bff07f2ef7abe4fe74c4dae4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ce1f91c1bcf6908b74e6f17a08696cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
Sleep
CreateMutexA
GetLastError
GetModuleHandleA
GetProcAddress
FreeLibrary
ExitProcess
RtlZeroMemory
TerminateThread
TerminateProcess
GetSystemDirectoryA
CreateFileA
CloseHandle
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
WriteFile
FlushFileBuffers

user32

DialogBoxParamA
LoadIconA
SendMessageA
SetDlgItemTextA
EndDialog
GetClassNameA
GetWindowThreadProcessId
EnumWindows

comctl32

InitCommonControls

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ