fbada4db2fec072c28a34dc7616a3bcd_JaffaCakes118 | Triage

Sharing

General

Target

fbada4db2fec072c28a34dc7616a3bcd_JaffaCakes118
Size

315KB
MD5

fbada4db2fec072c28a34dc7616a3bcd
SHA1

5e5d84045df5f3afaab71b1f86a004d762679191
SHA256

cf7d2405169c54085730ee426f1bb731887dd8da4790cd80a37591ee60b224aa
SHA512

2d64d56146ecf101e94d8ad61307d24aabe4b00342752566ae5b862ad2df4023403e0fc7a3eaaf0ed6f65865c60b08da596afef1f5861fd66999bb6a5220ecf4
SSDEEP

6144:PZP9ti18Gc5I++G2Ur2vAGu59uaoUp2VK1uPMawrdaR6Ip:BP9MFc5yBvAz59uao4i0ukawrdmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbada4db2fec072c28a34dc7616a3bcd_JaffaCakes118

Files

fbada4db2fec072c28a34dc7616a3bcd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

91deca3a8c6c4f0546eab1d1fccdd7b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawTextA
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyCursor
DeleteMenu
DefDlgProcA
CreateIconFromResource
CreateDialogIndirectParamA
CopyRect
CharToOemBuffA
CharToOemA
CharLowerA
ChangeMenuA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
TlsGetValue
SleepEx
SetCurrentDirectoryA
ReadFile
LoadResource
LeaveCriticalSection
GetVersion
GetModuleHandleA
GetLastError
EnumResourceTypesA

Sections

.text
Size: 67KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ