fbfed0a76ff6c8ae3135f15fb5e0172b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbfed0a76ff6c8ae3135f15fb5e0172b_JaffaCakes118
Size

118KB
MD5

fbfed0a76ff6c8ae3135f15fb5e0172b
SHA1

aad0f1d4b2d2119f3ba8922ff50ab046116df95e
SHA256

d18929066a89ba9a2cec1024eb32eeec3fde36b8b779236faf37c4da8a9f7d51
SHA512

d3d9732b68597f168f3159197c1030058ef60bf54d8129bdb3199b5ccc301751a395760b0471ea89e6d5dc672a460807bb398626cc368e3bdb50f847bc19ef69
SSDEEP

3072:WCKRp3nHn7zVP+/lhjKgXtV0bBPoYAcCBfOGY0M:kbnbo/lhWOtwPMcC13Y0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbfed0a76ff6c8ae3135f15fb5e0172b_JaffaCakes118

Files

fbfed0a76ff6c8ae3135f15fb5e0172b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4126afab80ab9ba5e5d4da7ac0b886e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
GetACP
lstrcpynA
GetVersion
GetStartupInfoA
GetFileType
TerminateProcess
GetCurrentProcess
GetStringTypeW
CreateFileA
GetStringTypeA
SetFilePointer
lstrcpyA
SetHandleCount
LCMapStringW
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameA
lstrcatA
GetStdHandle
GetCommandLineA
LCMapStringA
MultiByteToWideChar

user32

GetWindowTextLengthA
DrawIconEx
DrawTextA
IsWindow
InsertMenuA
LoadMenuA
GetDC
DrawIcon
CopyIcon
EndDialog
GetMenu
CopyImage
IsMenu
DrawTextW
GetFocus
GetWindowTextA
CreateIcon
CloseWindow
DialogBoxParamA
CopyRect
GetCursor

comctl32

ImageList_Copy
ImageList_GetIcon
ImageList_LoadImageW
ImageList_Add
CreateStatusWindow
ImageList_Create
ImageList_EndDrag

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ