fc7dc710d843fc77fe6246c20aed625b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc7dc710d843fc77fe6246c20aed625b_JaffaCakes118
Size

67KB
MD5

fc7dc710d843fc77fe6246c20aed625b
SHA1

a1a9fbcea02acf1dd7b50259af1baccd4506dc2e
SHA256

a1b1d98e3d4d04f8dffcc535a2044745396a1a4f994c6d2ddc7499e81c697182
SHA512

9b424b72ec5d8c415a9c58d7f9490012f0b3beaedb382167fb5df29cfbd7d8e5fa8c80ba0d0ce7bc70cc0f3c9bfd635fd34a61f6b9f9f78c49b26d685931b8a4
SSDEEP

1536:oZakAKIMKw1pfBVzcksticpXDu3jWKInqPkuLEz14T6k+qiC:oMk3fbLhcpXSj5hk7KT6k+qiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc7dc710d843fc77fe6246c20aed625b_JaffaCakes118

Files

fc7dc710d843fc77fe6246c20aed625b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce681d14d39eaac4d7eeb8d46d160597

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
CreateAcceleratorTableA
GetCaretBlinkTime
LoadKeyboardLayoutEx
InflateRect
AllowForegroundActivation

kernel32

GetLastError
VirtualProtect
NlsGetCacheUpdateCount
EnumerateLocalComputerNamesA
SetConsoleWindowInfo
EnumSystemCodePagesA

gdi32

GetKerningPairs
GetDeviceGammaRamp
DdEntry2
GdiConvertToDevmodeW
DeviceCapabilitiesExA

Sections

.text
Size: 3KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE