fcef2437a82a93b0dfc085cb68a5aad5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcef2437a82a93b0dfc085cb68a5aad5_JaffaCakes118
Size

336KB
MD5

fcef2437a82a93b0dfc085cb68a5aad5
SHA1

6293ca5a43fff2151b6c567bcb8a983ce651b3ce
SHA256

90c1daf40bab8ae829f1c3cac08f4fb41e43f4d3c8743e2f9b9b5abc37b2c6c3
SHA512

81343f8aee29028f63f1334b49c82d6dba7a2a879da998dda4a523ddd25d0adb51e3bffbe447656719463a9532b4ded1a3c654916bd955ac1aa202fd547cb7ff
SSDEEP

6144:GUm8d76JhYzQUO/Fb7z9U7RQKIYdu0V/mj7rcS6WlsQpEz:GU96JizGZO7Rv580hmj76Qp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcef2437a82a93b0dfc085cb68a5aad5_JaffaCakes118

Files

fcef2437a82a93b0dfc085cb68a5aad5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14149f2800333879aca31bb745b26b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatA
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
GetCurrentProcessId

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
OleLoadPictureEx
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

user32

GetKeyState
EnableWindow
CharLowerA

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE