fdb4df466d294dd1fd79595c22072b48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdb4df466d294dd1fd79595c22072b48_JaffaCakes118
Size

227KB
MD5

fdb4df466d294dd1fd79595c22072b48
SHA1

a8901604fb09b6ff9f384f4117a444c3d3932e75
SHA256

c072de76ebb728527f0f901afde69863248ae00bef2afc1a9dc4f49b8724bcd1
SHA512

1a077c11ccdfe385240bea6fdc4d5c8e4e7766e67933e49c3681d2ee4e7c3b923e256045abe0276fa4a6c4dfb639a6056f321394282493dff04247fe3017a081
SSDEEP

6144:lV+yJYIBdMwWTmOok7rOPN6kOEezfp5EGkLwCD3:fXYHwWdrLse95DkfD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdb4df466d294dd1fd79595c22072b48_JaffaCakes118

Files

fdb4df466d294dd1fd79595c22072b48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d1c0aa835ac3997ecb51f08e3a63fed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteFileW
ExitProcess
GetTimeFormatA
HeapSize
OpenMutexA
ReadConsoleOutputAttribute
SetCommState
UnmapViewOfFile

user32

DdeSetQualityOfService
GetKeyNameTextW
GetProcessDefaultLayout
RealGetWindowClass
SendIMEMessageExW
SetMenuItemInfoW
ShowCursor
ValidateRect
VkKeyScanW

gdi32

DeviceCapabilitiesExA
GdiGetBatchLimit
GetBkMode
GetCharWidthFloatW
GetGlyphOutlineA
PtVisible
SelectClipPath
SetDeviceGammaRamp
SetLayout

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ