fcf442b65c0df4d4bfac7336df4bf0de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf442b65c0df4d4bfac7336df4bf0de_JaffaCakes118
Size

36KB
MD5

fcf442b65c0df4d4bfac7336df4bf0de
SHA1

fb7856ea66154b67ac994d3b7d58b434e29214ad
SHA256

42a0b71c20601fc4e764e7a100f290c4d3b4e3c1226edab6c6e250dc55965868
SHA512

aaadc9cebd9779929bb7e11fefae77bd4c88e16db30df62c97d53cef677b377ba011d1a40d6503020913de84f82645e400c3cdd94b5bd152fcd432c4d9f4e458
SSDEEP

768:hn99W12l7LO111+QzyM6qpcrYSXA0ycG3uLE/gIFIcJPA1A+C3zP:VrumvOb1+Q67rpr0e4/Rqw+CD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf442b65c0df4d4bfac7336df4bf0de_JaffaCakes118

Files

fcf442b65c0df4d4bfac7336df4bf0de_JaffaCakes118
.exe windows:3 windows x86 arch:x86

8627e2bb8a87b81ef6679d65b3963eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalLock
GlobalUnlock
ReadFile
GetModuleHandleA
GetProcAddress

user32

GetWindowDC
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetMapMode

Sections

PESEC0
Size: 226B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PESEC1
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 459B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ