fb3a9b4de8e8a0a69fdc04cc6b6991e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3a9b4de8e8a0a69fdc04cc6b6991e4_JaffaCakes118
Size

215KB
MD5

fb3a9b4de8e8a0a69fdc04cc6b6991e4
SHA1

9ad7432b41d63dc1734e20f234634397f9605c35
SHA256

57f6fd19c83e8fe6f73f8685dfe67fda5bd190435d0e81cb196cc12dcf149dfe
SHA512

522d6e6a1b0cf9b41d3c408911b73962d47bb55a6c3918f79647a5e2d38ceb394a8c9baf766935902a5a0256d8766c275f1c853826af3e06134864d8583a1677
SSDEEP

3072:ObTbDbTbMEW7NXh9x2HDdw2+9biEdBDM6Eio:ObTbDbTbMEWp4jm2+ZJDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3a9b4de8e8a0a69fdc04cc6b6991e4_JaffaCakes118

Files

fb3a9b4de8e8a0a69fdc04cc6b6991e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0ff6da0210e3300947b7a0615e4768d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
SetDlgItemTextA
SendMessageA
ReleaseCapture
MessageBoxIndirectA
LoadIconA
GetDlgItem
DialogBoxParamA
wsprintfA
EndDialog

kernel32

ReadFile
CreateFileA
Sleep
HeapAlloc
SetFilePointer
ExitProcess
GetLastError
GetModuleHandleA
GetTickCount
RtlZeroMemory
lstrlenA
FindResourceA
LoadResource
SizeofResource
CreateMutexA
HeapDestroy
HeapCreate
WaitForSingleObject
CloseHandle
CreateThread
SetThreadPriority

comctl32

InitCommonControls

gdi32

CreateFontA

winmm

waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutOpen
waveOutClose
waveOutGetPosition
waveOutPrepareHeader

advapi32

CryptAcquireContextA
CryptReleaseContext

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE