fb3e0bb34a6ae34e8a5a246f8d0d56a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3e0bb34a6ae34e8a5a246f8d0d56a5_JaffaCakes118
Size

374KB
MD5

fb3e0bb34a6ae34e8a5a246f8d0d56a5
SHA1

07c8eac30add1b32ff1948ed75c57a983c02ea80
SHA256

7fbafbd0ef1b4c3f9c42df7a5d24cfe1a1b9c842b0f9cc4113788a205084a3fa
SHA512

1989339cd69a6c11ca13e222ceae568164d87a1a61e36383cdb279e4a0d841d630321dc6b3de9d002ff7a37293f0b6151333dee2dca6bbc653c2c4ed62e42011
SSDEEP

6144:wp6WnaOJ3rLIHw3BgsWnEIzCiF4IfOGCy/URQgqFgiBNdkrSM:wsWaCr8HUBg3n/uiHcqBNdkP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3e0bb34a6ae34e8a5a246f8d0d56a5_JaffaCakes118

Files

fb3e0bb34a6ae34e8a5a246f8d0d56a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42d869383dcd2e5ff536bb4a3ec8cbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetupComm
FindAtomA
GetModuleHandleA
FreeEnvironmentStringsA
LocalFree
TlsGetValue
FindClose
HeapCreate
GetLastError
ExitProcess
LoadLibraryExW
GetACP
MapViewOfFile
CreateFileA
HeapDestroy
CreateMutexA
GlobalUnlock
lstrlenA
UnmapViewOfFile
SetLastError

user32

DrawMenuBar
FillRect
DrawEdge
IsWindow
GetDC
CheckRadioButton
DefWindowProcW
GetIconInfo
GetDlgItem
CopyRect
GetFocus
CallWindowProcA
DispatchMessageA
MessageBoxA

uxtheme

DrawThemeIcon
GetThemeSysInt
DrawThemeEdge
GetThemeRect
DrawThemeText

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ