fd0a4cea9845ab3d5f57956a2f81e085_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd0a4cea9845ab3d5f57956a2f81e085_JaffaCakes118
Size

86KB
MD5

fd0a4cea9845ab3d5f57956a2f81e085
SHA1

9a9f8f2e985b0486909ed9c6847c1484c003326c
SHA256

a139f56288de5b3b8aaa84e06dc9ebae6f2061059c6fe19539b4af1030a6e29b
SHA512

bac740fe19cda786cf6b6a1a7f1a4d2156b94483c43d09446d657970d83e1b8eace315149cc179ca03033776f5068980f67d8addfb174a0aa821c0e5f7a2d9a0
SSDEEP

1536:LGRSsdMRSYS9qs5mz8JeLeuZyJ+x/c9RzZYHh9mepiKkx1P1usQ2:LGRNdMRXs5kP/c09Mtur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd0a4cea9845ab3d5f57956a2f81e085_JaffaCakes118

Files

fd0a4cea9845ab3d5f57956a2f81e085_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6fce181d8b9814b8cbe1ff0f1ceea48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentThread
GetProcAddress
LoadLibraryA
CreateEventA
GetVersionExA
VirtualProtect
GetCurrentProcessId
LockResource
GetCurrentDirectoryA
FindResourceA
LocalFree
GetSystemDirectoryA
GetStdHandle
ExitProcess
GetComputerNameA
VirtualAlloc
GetWindowsDirectoryA
LocalAlloc
LoadResource
GetCurrentThreadId

advapi32

GetUserNameA

user32

GetActiveWindow
GetForegroundWindow
GetSystemMetrics

msvcrt

memset
memcpy

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ