fefb8168f3137afa1840f09fbbc78e21_JaffaCakes118 | Triage

Sharing

General

Target

fefb8168f3137afa1840f09fbbc78e21_JaffaCakes118
Size

108KB
MD5

fefb8168f3137afa1840f09fbbc78e21
SHA1

3537b5650a8dda17e67a8c03a991a14ae2c1722c
SHA256

15d5c07523d42c1bb1b09c9d3c6c3b61b75ef8e8799eef49a79a2c3491fbd6f4
SHA512

f45df46b577e78a866afd92e8997995eb7b4755f04aaa845452cd928880cde963d534b06a260913a6f86f9fb3d739786cf90d66ae944b9b9d87e8ff95c28875d
SSDEEP

1536:20mwNiX6ZC8qHlLYHroQH3M6wL0a6na2qebml:x0X6ZfqH1YHdM6wv2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fefb8168f3137afa1840f09fbbc78e21_JaffaCakes118

Files

fefb8168f3137afa1840f09fbbc78e21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b638b2034c23aeede02740dca786238

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetOEMCP
VirtualAllocEx
CreateFileW

user32

LoadIconA
LoadCursorA
LoadCursorW
GetMenuItemCount

advapi32

RegOpenKeyW

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 581B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data45
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data44
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE