fcfefcbe1b26b8597f138d7ecc3bf25b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcfefcbe1b26b8597f138d7ecc3bf25b_JaffaCakes118
Size

138KB
MD5

fcfefcbe1b26b8597f138d7ecc3bf25b
SHA1

1e373faffaa3276fe0a1d91824beb77668b7ddcf
SHA256

7ef5e21e483423f158a99ada03b06ec04469df360b018153898efde319244f4b
SHA512

caa45c15ee3b4dc32bfb1faff84b23ef0532dddc399b6cb3fbfa336422caf462772f71fd7f05e7d3610df436f5c23df9c18a28dc30d7fd0017bff6ab54bd03f3
SSDEEP

3072:Tdeu9GU3nfP87j5E1DQyatoRblEfH0OZAZCJJ91L/:b3nfP87t+DQbQZEac1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcfefcbe1b26b8597f138d7ecc3bf25b_JaffaCakes118

Files

fcfefcbe1b26b8597f138d7ecc3bf25b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

436697ea49cbda54f63cb4449a1d7fce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
LoadLibraryExW
CancelIo
GetConsoleTitleA
ResetEvent
GlobalUnlock
IsDebuggerPresent
VirtualProtectEx
GetLastError
EnumResourceTypesW
FreeConsole
GlobalLock
lstrlenA
IsBadReadPtr
LocalFree
CreateMutexA
GetSystemTime
GetModuleHandleA
Heap32First
CloseHandle

user32

IsIconic
GetMessageA
GetDlgItemTextA
EnumWindows
GetParent
GetKeyState
CreateWindowExA
DialogBoxParamA
CloseWindow
GetDlgItemInt
CopyImage
GetMessageA
EndDialog
MessageBoxA

setupapi

SetupCopyErrorA
IsUserAdmin
SetupCloseLog
MyRealloc
MyFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ