fbd25a2f670f71e152057047faa8cbb2_JaffaCakes118 | Triage

Sharing

General

Target

fbd25a2f670f71e152057047faa8cbb2_JaffaCakes118
Size

164KB
MD5

fbd25a2f670f71e152057047faa8cbb2
SHA1

15a4c8b713878d7ac3a941013a3fa2346c4f99dd
SHA256

76ac60451f9bed4532d803a4fdda105b1fe174156e57ec9f84f5a432a20b39c2
SHA512

0ef95edeff4e1024b28d16c92dbaab5887cccc8cbc32a55a6f0ee4d9ae721c61e96139615d7737b3660bd09a500f7523043d57bea6e4a5aaa82c1c078eaac3b5
SSDEEP

3072:zBV+dp6Ihm1pKsI2/INmWvKsYTXDqKgn69WtvN33jpk9QVGV+dYO4:XO0Ih+hv/sKBTDqKlcvZ9k2c+dK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd25a2f670f71e152057047faa8cbb2_JaffaCakes118

Files

fbd25a2f670f71e152057047faa8cbb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e58ff8e68350e55a51f921f132b92b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetTapeStatus
LCMapStringW
ClearCommError
ExitProcess
EnumResourceNamesA
ExitProcess
LCMapStringA
GetModuleHandleA
GetCPInfo
GetProcAddress

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetWindowInfo
MessageBoxW

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ