fcd119ae5c9a951907cda141279f9339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcd119ae5c9a951907cda141279f9339_JaffaCakes118
Size

338KB
MD5

fcd119ae5c9a951907cda141279f9339
SHA1

8bf488b4f3e926309335934ca47b714cd6510cb9
SHA256

7a3bb274532c5e2f9d3358b44bfb07ac94db80abecc2ce1c082b9ca50f349c76
SHA512

e0c7da7a36aaf53f4ca370aa0780bf7fcfd90d8e53a1dc1f02f458b96c4812e18f18d8cc1571acabb746eebe6366666a17ef872dcf099b14e9eae778d6c0a416
SSDEEP

6144:GUm8d76JhYzQUO/Fb7z9U7RQKIYdu0V/mj7rcS6WlsQpEC:GU96JizGZO7Rv580hmj76QpZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcd119ae5c9a951907cda141279f9339_JaffaCakes118

Files

fcd119ae5c9a951907cda141279f9339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14149f2800333879aca31bb745b26b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatA
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
GetCurrentProcessId

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
OleLoadPictureEx
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

user32

GetKeyState
EnableWindow
CharLowerA

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE