fb23aa5310276776c19c66aab048ffb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb23aa5310276776c19c66aab048ffb5_JaffaCakes118
Size

275KB
MD5

fb23aa5310276776c19c66aab048ffb5
SHA1

96c47292aabf6b868e4177df53dd7dc37bb03f91
SHA256

4ac5de509f6b395af6c48f48cf3ce76eeee86f13b21920c7b490af8a0b782061
SHA512

2faf7821147514ca92919a21ad6e7fb4364407644392dd9fe55714793164d0d54973f36bbdc4f4d600f75df585aa9f4798ee4c6cd8a1db82687656c7357ba6db
SSDEEP

3072:4Y4j1T7mO2Joa70GB10D5U9FYj3icSh0WJDvtzaZko3z4MG3BtSHYbMQ9aPvA:4Y4j1mO2pL09UVqZ9EMGxwHPQ9wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb23aa5310276776c19c66aab048ffb5_JaffaCakes118

Files

fb23aa5310276776c19c66aab048ffb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f71e0ed3161b485ef662623aeae80ee3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateThread
DeleteFileA
EnterCriticalSection
ExitThread
FindNextFileA
GetLocalTime
GetTickCount
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalLock
MoveFileW
ReleaseMutex
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

GetActiveWindow
GetWindowPlacement
LoadMenuW
PostThreadMessageW
CheckDlgButton

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 261KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ