fbbe86cc5651c2766249f505beeff96f_JaffaCakes118 | Triage

Sharing

General

Target

fbbe86cc5651c2766249f505beeff96f_JaffaCakes118
Size

260KB
MD5

fbbe86cc5651c2766249f505beeff96f
SHA1

7acefb584a209d9f96ac66424446f3fbb65eb940
SHA256

af795073ba8dfe4738346b57941f212d9bff1e4c4dfb7063b0f3abc13907e276
SHA512

c39b5c501bb6b417e214a7d55934ef3c495f9b8a1a20f4adc4af5e88e4e1d64bc4f39928f5574829eb25e54dc178c0400933c7795d906381ea8795fc82447acb
SSDEEP

6144:yXuilJholW9kGk05u9xQd9ZtzolA+Tfdv:WJ8W9kn05E0zolA+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbbe86cc5651c2766249f505beeff96f_JaffaCakes118

Files

fbbe86cc5651c2766249f505beeff96f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a222002bdf84cd39cfa344d0dd3ba25d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EndPath
EndDoc
SetBrushOrgEx
SetColorSpace
LineTo
UnrealizeObject
GetDeviceCaps
GetTextMetricsA
SetMapMode
SetBkMode
MoveToEx
BeginPath
SetViewportOrgEx
SelectPalette
GetDCOrgEx
GetDIBColorTable
GetPixel
SetTextColor

user32

GetInputState
GetMessagePos
CharNextA
GetDesktopWindow

kernel32

GetThreadLocale
lstrlenW
SetLastError
GetACP
CopyFileA
lstrcmpA
GetCurrentProcessId
SetCurrentDirectoryA
GetCurrentThreadId
GetCommandLineA
RemoveDirectoryA
GlobalFindAtomW
GetDriveTypeA
lstrcmpiA
VirtualAlloc

comctl32

InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE