fa9b8913726ebb9f0cd5794868d4f592_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa9b8913726ebb9f0cd5794868d4f592_JaffaCakes118
Size

76KB
MD5

fa9b8913726ebb9f0cd5794868d4f592
SHA1

b9a29679c66a2c5355fa871e829f41d6e0a44a7f
SHA256

5953a69e5ea31d179bca79723dbeab9606fe329420063544533261c843d00ae9
SHA512

de4da3acb060ce59f6c5eca39200c357d6008b96f0f7b18e9c3ece27f9bdd3b6cb60235042f680665f9e479f802076718a5f256bc9edf3a81f2c88b5bc76d754
SSDEEP

1536:JlswY17zqcStLtZzvMjYVT9etYtOEqWWXOOY6uD:JlZYFz3ELfz0cVT9eWEESX7w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9b8913726ebb9f0cd5794868d4f592_JaffaCakes118

Files

fa9b8913726ebb9f0cd5794868d4f592_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ded6c5a572aa7477a74751c37dd61813

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
MapWindowPoints
GetMenu
CreatePopupMenu
LoadBitmapA
MessageBeep
LoadKeyboardLayoutA

shell32

SHGetDesktopFolder
Shell_NotifyIconA

kernel32

VirtualAllocEx
ExitProcess
HeapAlloc
InitializeCriticalSection
GetThreadLocale
LoadResource
LoadLibraryA

gdi32

CopyEnhMetaFileA
GetDIBits

Exports

Exports

iJ2c7A8cDw

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tidata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ