fbae0d6dd7426cdd72268a4eca6c7ca7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbae0d6dd7426cdd72268a4eca6c7ca7_JaffaCakes118
Size

391KB
MD5

fbae0d6dd7426cdd72268a4eca6c7ca7
SHA1

e5c4c366ccd6331c99eb064efef03e31fe4d3696
SHA256

cbd25c84c8c07eced82a58bf6221c691cef70276aa673c2211829f657737abe9
SHA512

11794ecfbf3f9a93901519f50b98ecc936e2af748d730c2292239cc0fe0abea97d85964e92bfcc7d36844c51ebdaf048f7852619e187773bb7cf6b865054ff6e
SSDEEP

12288:/BPRMnHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:JPRMnkAJLjpFvN/ytkjEOfoMWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbae0d6dd7426cdd72268a4eca6c7ca7_JaffaCakes118

Files

fbae0d6dd7426cdd72268a4eca6c7ca7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a551e48a5205820cbe7e2dcf77cc36bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
InitializeCriticalSection
GetCurrentThreadId
ReleaseMutex
LocalFree
GetDriveTypeA
IsBadStringPtrW
FindAtomA
ReleaseMutex
GetCurrentProcessId
CreateEventW
GetEnvironmentVariableW
HeapCreate
FindClose
GlobalFlags
LoadLibraryW
lstrlenW
WriteFile
TlsGetValue
GetPrivateProfileStringA

user32

DrawStateW
GetSysColor
SetFocus
GetSysColor
GetClassInfoA
GetKeyboardType
GetClientRect
DispatchMessageA
IsWindow
CallWindowProcW
EndDialog
CreateWindowExA
DrawTextA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ