fc8e25275bee2569e4d4556cc1701aeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc8e25275bee2569e4d4556cc1701aeb_JaffaCakes118
Size

103KB
MD5

fc8e25275bee2569e4d4556cc1701aeb
SHA1

0084f287a2d99bcac40105f15498ccd34665a3e1
SHA256

872e2ab353538f3a5a0e3477c54fdd45f11927ac15a137070bc373a4eaa641af
SHA512

bde58692f55399b24b3e1e796df4a29d342cd14bdff8eea3d210ba89f8ebde8e90b00bbb06137455f7389d05c9a0b87873a57de74a7360a129fcc2b1e02ceb34
SSDEEP

1536:NReaD5qTzbDLxiMOyjnKnwolkRrLm/2QZn8qUzvDRWGiyG8J11ctEZ:NE955OyjqwolkRe/2Qp8lzvNWlsJ0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc8e25275bee2569e4d4556cc1701aeb_JaffaCakes118

Files

fc8e25275bee2569e4d4556cc1701aeb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dae3fdfa116c24533394da9d0ef685ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoExA

gdi32

GetSystemPaletteEntries
StrokePath
GetTextExtentExPointI

kernel32

GetCommandLineA
HeapCompact
SetFileBandwidthReservation
GetSystemTimes
FlushFileBuffers
GetModuleHandleA
GetSystemDefaultLCID

oleaut32

SysAllocStringByteLen

winspool.drv

OpenPrinterW

advapi32

QueryUsersOnEncryptedFile

user32

GetScrollPos
DdeQueryConvInfo
GetProcessWindowStation
BeginDeferWindowPos
ToUnicodeEx

crypt32

CryptStringToBinaryA

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ