fc78526a9b0de2e107a2cee3d2765c30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc78526a9b0de2e107a2cee3d2765c30_JaffaCakes118
Size

111KB
MD5

fc78526a9b0de2e107a2cee3d2765c30
SHA1

220b8d9ff1a1cf556d1dc53837fcb87576479021
SHA256

d689be0ec913e544afcefc051416540c8b4266e1a2c2aea10a77b700dc92a50f
SHA512

bbf4b938da1d25ec6828c1331682374fcbb7c2498c521af693719ff018003708995f563af8180e7f0289ec6d8011c74819df926e0e49f16a3b9164700783346e
SSDEEP

1536:ohLaziqi5l5DThsCB7Bv2WwDe4aTq3isQT8jNzl7xMppniqipTM90NEcA:ohLtP5l5DlvB7Bv0a05l7xM/nr90icA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc78526a9b0de2e107a2cee3d2765c30_JaffaCakes118

Files

fc78526a9b0de2e107a2cee3d2765c30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d412cc7326d0752bfaad98c5afcd6a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
CreateFileA
CreateSemaphoreA
VirtualProtect
GetCurrentProcess
VirtualAlloc
VirtualFree
LocalFree
LockResource
LocalAlloc
LoadResource
FindResourceA
VirtualAllocEx
CreateEventA
SetEvent
ExitProcess
GetModuleHandleA
Sleep
DeleteFileA
WaitForSingleObject

user32

SendMessageA
FindWindowA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ