fb8804935afb1deb61791409bec4400f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8804935afb1deb61791409bec4400f_JaffaCakes118
Size

81KB
MD5

fb8804935afb1deb61791409bec4400f
SHA1

a90fd208e4ceed2c178d949fe10a9ed4be606fe8
SHA256

8c4affdd1661215dec5447cd9cb50a3fdca4647690f9c3ab71fe8fb4ab9edc34
SHA512

acf05169dcfa152b8614e5ce054f61a83413f9c7e26df21ddfdb9c06c75584b03dfda11f0f779ebc0c3c2aacc40e8d44cf894ce5516ecbb7fd0eb4b83d6c99d7
SSDEEP

1536:EsOY6pPi5wkDbX1a5BK64twXCnR5FUeImFRsE4w6:6NpPiDbluBK64qXS5FAE74w6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8804935afb1deb61791409bec4400f_JaffaCakes118

Files

fb8804935afb1deb61791409bec4400f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a14b33accca45574e6c462a897124e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseColorW
GetOpenFileNameW
LoadAlterBitmap
WantArrows
CommDlgExtendedError

user32

LoadMenuW
IsChild
GetWindow
MapDialogRect
ModifyMenuW
IsZoomed

urlmon

InstallFlash
GetClassURL
IsJITInProgress
CreateAsyncBindCtx
CoInternetGetSession
GetClassURL

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE