f1ad107d1f55fffbbce4ad1d1cb1c3de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1ad107d1f55fffbbce4ad1d1cb1c3de_JaffaCakes118
Size

100KB
MD5

f1ad107d1f55fffbbce4ad1d1cb1c3de
SHA1

36671d16b10721ecc2197d09c3e9019d43708e6b
SHA256

4c0df4df5ef04ceb99d53dfde667c69a4588588c80db584e522ba7de27a3b1e2
SHA512

61a1bb9f1e974dd20db31cb4b13c829ae2fe5459b97798f39235392903e8c0f29175fe8b56bbbba73ee5cd9f2b5e118f635995cd5249970a5ea746a116ae3c79
SSDEEP

1536:h8g3lwf04TB6OWoq8pi/nGiv7vQ+OvZsPNIaQirbGCGAT:tlCtB6olpiDFOvZlAGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1ad107d1f55fffbbce4ad1d1cb1c3de_JaffaCakes118

Files

f1ad107d1f55fffbbce4ad1d1cb1c3de_JaffaCakes118
.exe windows:5 windows x86 arch:x86

71b9214ac91457ce43f92b687d9246da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
InterlockedExchangeAdd
ExitProcess
HeapAlloc
WaitForSingleObject
GetProcessHeap
GetLastError

shell32

PathResolve
SHCreateStdEnumFmtEtc

Sections

.textbss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 305B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ