f13fba5bf22187ca6d4a57babb245c62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f13fba5bf22187ca6d4a57babb245c62_JaffaCakes118
Size

15KB
MD5

f13fba5bf22187ca6d4a57babb245c62
SHA1

3c6bc08eff63d3fb3f8390f178af29e59c4bf19f
SHA256

fbd5cad63a117be5f4ed09ab965c523dd12ee362c7799b0faaddba178a39c791
SHA512

4f230f3c5c815880f07bb5c3a0c5bf9d39c077e992fb27479f602bf745b806bf247b22eeb63d00abbd16144f63bad1918f23a8f4b6f20c703512705cd14dfc7c
SSDEEP

384:UaeHEXBFv8+XUZWJig3srLpp8QLpRq4ixiyoG:UFkLv8+E1fVRqpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f13fba5bf22187ca6d4a57babb245c62_JaffaCakes118

Files

f13fba5bf22187ca6d4a57babb245c62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05f74346c5bd2d43502fb7b32cecd993

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId

Sections

.text
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ