fe6b3611a16ed717eb05d0d0ca37efe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe6b3611a16ed717eb05d0d0ca37efe8_JaffaCakes118
Size

66KB
MD5

fe6b3611a16ed717eb05d0d0ca37efe8
SHA1

fed63e64e86cb550e609f239c3c29cbfcaaf5588
SHA256

cc135874658f834925b3da53cf7e882b4f5f324d2701dfb0430144ebcd9f5b3d
SHA512

e4c12bdf987a6226145910a138dc2c03e2c6560cf8d6e1e31a4e3277006935ac3c6a095d5fc3bb81b70ce6c1e6ee8d3cbcea26fd1e239c9a0e1c183f8bb00899
SSDEEP

1536:3lLEMst1pAcREbVUlxFw9a5QS/4JI6cSMMcJ63UNSxyT:VotDxFNQSd7SMCUNSoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6b3611a16ed717eb05d0d0ca37efe8_JaffaCakes118

Files

fe6b3611a16ed717eb05d0d0ca37efe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d71b2c1eeb1bba475ccc94192471cc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAltTabInfoA
GetDialogBaseUnits
GetMenuStringA
GetMenuItemID

advapi32

CloseRaw
CryptGetKeyParam
CryptSetHashParam
GetSecurityInfo
OpenEventLogW
QueryRecoveryAgentsW

kernel32

GetConsoleAliasesW
GetConsoleTitleW
FindAtomW
GetProcessVersion
LCMapStringW
HeapAlloc

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE