fbee62e28cc694178d1189a65acbe791_JaffaCakes118 | Triage

Sharing

General

Target

fbee62e28cc694178d1189a65acbe791_JaffaCakes118
Size

15KB
MD5

fbee62e28cc694178d1189a65acbe791
SHA1

fd2418dea822f749bc77107c2f08a942248b799d
SHA256

9439115892aa935b0faf09ac2d2ed3b1ef0758f07845b50965427d8f98f2a885
SHA512

9891d75e8b85ff317f694c0291f7ca8bca3d029b76abfeca49e61d98ae81a55a161555d4d2835b3d82c19200b29bf92f2eba0b1b9ad45abc471b6d899ffdbf45
SSDEEP

384:ZmLVXgI77hnntLp92yjqVVMvlv9L13UKJms:QwwnjFlLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbee62e28cc694178d1189a65acbe791_JaffaCakes118

Files

fbee62e28cc694178d1189a65acbe791_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67cc0c37d1beb4c7b795d92d2a3f964c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassA
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ