f00b22133decb7741075874e71c7f044_JaffaCakes118 | Triage

Sharing

General

Target

f00b22133decb7741075874e71c7f044_JaffaCakes118
Size

179KB
MD5

f00b22133decb7741075874e71c7f044
SHA1

df7ec7102a71f2cab5a9371e94e681348c3d6482
SHA256

b2211ed17c01dc1d776917f2118523861019cf31bb5950b2df66558e1eda2b50
SHA512

479f22801709b3347e88a276fcafd60b4c2d5d372768a42396e28bd3d8d2a78546915bf156b082b50d2090f310dea0a2438835e75d4a619ef9b916070f890e3a
SSDEEP

3072:dzsZiout/AXYFpqBGygV8XyrH7HqQyAUdiSQPdaTQe1cuhk8OVcs6IHLaD7ZOhjY:aZjuAXYLqBpgVkkHTDUd9Q1a8rH8OVPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00b22133decb7741075874e71c7f044_JaffaCakes118

Files

f00b22133decb7741075874e71c7f044_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67e614115ece14a2231db9ffe648636a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrFixedArrayFree
UuidCreate

user32

TrackPopupMenuEx
FindWindowA
ClipCursor
RedrawWindow
CreatePopupMenu
DestroyMenu
GetDesktopWindow

kernel32

FlushInstructionCache
DuplicateHandle
FindResourceExA
UnmapViewOfFile
EnumResourceNamesW
SetEnvironmentVariableW
GetModuleFileNameW
FindFirstFileA
MapViewOfFile
FindClose

shell32

Shell_NotifyIconA

winmm

timeEndPeriod

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ