fb6576ca01d4868cf1008eb6d3e7d66c_JaffaCakes118 | Triage

Sharing

General

Target

fb6576ca01d4868cf1008eb6d3e7d66c_JaffaCakes118
Size

328KB
MD5

fb6576ca01d4868cf1008eb6d3e7d66c
SHA1

5a53c680eb94c5653c44169535f9bf2195c5f129
SHA256

24374dafc714b7b5d91de53727cdb7cf79ee9464cb06dc8a28ae4ee0bcef0978
SHA512

de10628f8bec1d727430d568c7a5b04303cbf1c5057f676a90e15a89874790ec34fb1a0458b55d6e724c9f1a5a34b4370b2d6089d354ffe8cf5000fbdd387454
SSDEEP

6144:ShLAmPXpDukqkL3OJmR5VHqCoVavBiI0JpFXOn105tg8Ez+Klat5:eLASpD8kemboUZiISI05C8EzjlS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb6576ca01d4868cf1008eb6d3e7d66c_JaffaCakes118

Files

fb6576ca01d4868cf1008eb6d3e7d66c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ce4e42dba182c7327c72749b2bd74d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
SetLastError
LoadLibraryA
HeapReAlloc
GetProcAddress
FlushFileBuffers
GetEnvironmentStringsW
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleA
GetStringTypeA
MapViewOfFile
ReleaseMutex
LCMapStringA
CreateProcessA
GetStartupInfoA
GetFileSize
VirtualAlloc
GetCommandLineA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ