fde68f476b9bd89507b36bf4efa495cb_JaffaCakes118 | Triage

Sharing

General

Target

fde68f476b9bd89507b36bf4efa495cb_JaffaCakes118
Size

70KB
MD5

fde68f476b9bd89507b36bf4efa495cb
SHA1

a6912915aa4dc671059828056f929b9f8cf9d0a0
SHA256

f5ee06f5f6aca34932acb500b749af31b4f4f401ea3b7380f6c53b9e5347fa76
SHA512

e69da242cb32bfb122c99e314e595779e8b94f578a6b9cb55b5013f431866f8418af52635f1a8a731728318a030b9dfa195b62926222d37f95c336701a184226
SSDEEP

1536:1r/2MNkGu7BrlxwIAWjIyn62nR8Q3lSSZjg:13kGqBroIAWEQ622O8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde68f476b9bd89507b36bf4efa495cb_JaffaCakes118

Files

fde68f476b9bd89507b36bf4efa495cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ