fb658c9ae0812f2485319d3ee0c61e09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb658c9ae0812f2485319d3ee0c61e09_JaffaCakes118
Size

21KB
MD5

fb658c9ae0812f2485319d3ee0c61e09
SHA1

2992ac55d8d068f1ae1108390bb15291e561301c
SHA256

a0c0593a255505f367335f93a63b5775445f113ef0a2f30efc6b17d2156c6941
SHA512

fb23ada4d943845f385868370885b042a04e9e708dda484e4b359cbbc4d21c03996c54b95d6911c31571f7b87f3aed49b8d575caf836b2f5e8beb40c6e671922
SSDEEP

384:7dA2qnLHvemRW1D5JbxM5CHJzWglHa/XLgJGnomPKBYdiW:7wLve3e5CHdWVXRomPIYdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb658c9ae0812f2485319d3ee0c61e09_JaffaCakes118

Files

fb658c9ae0812f2485319d3ee0c61e09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30312b184a0c882f4ca30e71f56ed7ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess

user32

BeginPaint
BlockInput
CharLowerA
CharUpperA
CreateDialogParamA
CreateWindowExA
CreateWindowStationA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetTopWindow
GetUserObjectInformationA
MessageBoxA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 868B - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ