fba021948bf126f10d1f05920c17f53c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba021948bf126f10d1f05920c17f53c_JaffaCakes118
Size

387KB
MD5

fba021948bf126f10d1f05920c17f53c
SHA1

468b6712e2414705fa8199b7ecd7d392d553bba2
SHA256

a3422c720e65f963f0a108d899437cb85b604e9cdf9925c92fd542298df23b3d
SHA512

9126d5b4b540f213928c12a3ea1ab5825e667005953efa0cc3a40b6e6b88df2eb11d3ec31f02d9f240134495108fa7a0eba3772641e978fd29f3eae8162b82c2
SSDEEP

6144:qCgqBJY7AolCwZN4aBQRMYZWDyrQfI+RTvErrd2cRPn9JuNP7Z8fI5Pp:q1YfooraBQRMYSyraDyr0cR7EDNJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba021948bf126f10d1f05920c17f53c_JaffaCakes118

Files

fba021948bf126f10d1f05920c17f53c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0aed028d651b78a965c1d94f41f6675e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetProcessVersion
ExitProcess

user32

GetMessageW
GetCursor

Exports

Exports

AddUmaffbmk

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lhm2l1
Size: - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 359KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ