fc46faee0ace1142b51592bd01ab2f0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc46faee0ace1142b51592bd01ab2f0e_JaffaCakes118
Size

498KB
MD5

fc46faee0ace1142b51592bd01ab2f0e
SHA1

b45529fa4e5f34059f7e02f52d2484a092e4a6fe
SHA256

18405c21ee3ec78311fef57db8657e5eba3e93087a581db30169b3aec2beda46
SHA512

a04b5a2ed74d9a58d2ca25d7ba6f34099328756ceb48fba292901b6c4de3df54a459aa19c6172fdea5c0ec0dbe1f8c6b427547107cada41a7375abcf4f847929
SSDEEP

6144:OCdhvkZ8gulzV2V9/H5DTwaHd6dcNiXPnpUTJPyd+MElqwkp7:OC/MZu2z96dcYXPnpcJPydjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc46faee0ace1142b51592bd01ab2f0e_JaffaCakes118

Files

fc46faee0ace1142b51592bd01ab2f0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cf9df718618a810c1c7ba71b64c5a91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
CreateFileA
Sleep
DeviceIoControl
PulseEvent
IsBadStringPtrA
CreateFileMappingA
GetModuleFileNameW
GetStartupInfoA
lstrlenA
TlsGetValue
ReleaseMutex
IsDebuggerPresent
TlsAlloc
GetACP
GetModuleHandleA
HeapCreate
SuspendThread
GetFileAttributesA
DeleteFileA

user32

GetIconInfo
DestroyMenu
LoadImageA
CallWindowProcW
FindWindowW
PeekMessageA
IsZoomed
DestroyWindow
DispatchMessageA
DispatchMessageA
DrawTextW
IsWindow
GetWindowLongA

asycfilt

FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance

cryptui

WizardFree

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ