faa4d8c8f73536211fb86d568ff70391_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa4d8c8f73536211fb86d568ff70391_JaffaCakes118
Size

64KB
MD5

faa4d8c8f73536211fb86d568ff70391
SHA1

ca41bc3f34e36d7b03dd3814828e1d03d9a93997
SHA256

0776c0982642abe2ce419d7ac9b80d9a4967c83808e3540f139d18dc8ce660b4
SHA512

cb936a5cbe13b1dcbaf4aa47d3825e8bbcd7d93a5634bdf27960d1cf50ba745824918b46dd98635e97f8a5c78e15410fc4a1eaae1bd9b7e5b7d40a722a994f71
SSDEEP

1536:k9lSx0P1pWGBgAIYzdmwaV/xYWrAmCM0PyN:k/S0PBUQmwaw0TCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa4d8c8f73536211fb86d568ff70391_JaffaCakes118

Files

faa4d8c8f73536211fb86d568ff70391_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE