fcf5c3d0e2d9aae2c2137826927ca26c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf5c3d0e2d9aae2c2137826927ca26c_JaffaCakes118
Size

426KB
MD5

fcf5c3d0e2d9aae2c2137826927ca26c
SHA1

3a65e222794e93322d1c1d1488bd68a5dde6c31f
SHA256

c93906e256a2fc9ce5f6cc24c87f615cd09a5d7613189d535ea27ba1e3006a94
SHA512

ab5b33ef16c7bd50e6dd4f21cf300e8731f3b0dba5533e1d2c074c9739f2bd20b6c573dc20c75b7e7a157204faa073e3cad9f5a9db6744153fe9a71ff1d687b8
SSDEEP

6144:81mP62UK5zfunQgGysTJ5DOgwoq2bBcQfhqDTRE:8W+GHDd/fhqDTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf5c3d0e2d9aae2c2137826927ca26c_JaffaCakes118

Files

fcf5c3d0e2d9aae2c2137826927ca26c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73fa3af456d2c17a3e1683eb5f1570e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
LoadLibraryW
GetProcAddress
LoadLibraryA

user32

LoadMenuA
GetSubMenu
ClientToScreen
TrackPopupMenu
MessageBeep
CheckMenuItem
SetClassLongA
InvalidateRect
MessageBoxA
SendMessageA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA

gdi32

GetStockObject

msvcrt

memcpy

Sections

.text
Size: 391KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ