fae3bc1239928f9ab33bf448216ac7b9_JaffaCakes118 | Triage

Sharing

General

Target

fae3bc1239928f9ab33bf448216ac7b9_JaffaCakes118
Size

63KB
MD5

fae3bc1239928f9ab33bf448216ac7b9
SHA1

e393fed29aae103d6b8db21a5a085aad4687d5d1
SHA256

f5d828d99fb451bd546750f7a7afbe223722a6f18fb87bc88e229e58132e3a06
SHA512

a599efca166f6949c4d6c32b10715b7cfb548308302ecd8dbd729fea219ba4e3d23162bc59d79d04f16114c021f9962661903d8cf00b4af750361f4a644c4532
SSDEEP

768:zZIhuFg73+GhFy4VjnDitRIkZJqj6+J3nQ8iyKhiBphFEWw10nVS3:dIhCg7OiF7Zj5xlkiTEIVs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fae3bc1239928f9ab33bf448216ac7b9_JaffaCakes118

Files

fae3bc1239928f9ab33bf448216ac7b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19ef4b0522b29b44736e76f9d5288601

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LoadLibraryExW
GetModuleHandleA
TerminateThread
SetEnvironmentVariableA
FindResourceA
CreateMutexA
CreateFileA
HeapCreate
lstrlenW
SetLastError
ReleaseMutex
PulseEvent
GetConsoleMode
CloseHandle
GlobalUnlock
GetStdHandle
Sleep
GetCurrentThreadId
TlsGetValue

user32

DispatchMessageA
IsWindow
DrawMenuBar
GetDC
CopyRect
GetClipCursor
DrawEdge
GetDlgItem
CallWindowProcA
CheckRadioButton
GetIconInfo
FillRect
SetFocus

apphelp

SdbFindFirstTag
ApphelpCheckIME
SdbGetDatabaseID
SdbCloseDatabase
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE