fc0f27ebd820391b81d605f2d428bf84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc0f27ebd820391b81d605f2d428bf84_JaffaCakes118
Size

361KB
MD5

fc0f27ebd820391b81d605f2d428bf84
SHA1

bcf424518f7af62e9a8ac777c97497ee1050ff04
SHA256

8632e6fdfe1a33f03d8f82481ca11f5b65e608a4054e38f26c288800c5b9d089
SHA512

59075de2b15e4a80cffcb0a99591c65155c48435ad8aad07ffe0f7577ad4959e3021af2f890378998edc6ba511ad1d1bdc087a8d97421cd084789cf6a4fbd759
SSDEEP

6144:fp6uceiiIqT0UjvK5vpgoXqJroAlIjqORbLOYqlTw7ZzZozIGlFtVMXYa:B6vrqTcTZPLwTCClXVMXYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc0f27ebd820391b81d605f2d428bf84_JaffaCakes118

Files

fc0f27ebd820391b81d605f2d428bf84_JaffaCakes118
.exe windows:1 windows x86 arch:x86

115945bd70ac5b33830e279c228b4c94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW

user32

UpdateWindow

Sections

.text
Size: 50KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE