fb1fa52455440e6b13ca7d6d5f25a086_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1fa52455440e6b13ca7d6d5f25a086_JaffaCakes118
Size

22KB
MD5

fb1fa52455440e6b13ca7d6d5f25a086
SHA1

2be0939fd73cf2c39a674330a2966caf5db0a48d
SHA256

110da3cd73a439f7f0246bcc8ffa78add11bf7b65c929ff7194fbfe5cbc591b6
SHA512

9da099ba481109698fc1cb72f493d4a1ad93692be50dbd4cac5aa1939af961df532e8e7af38640166a915a371e9bd96a88c8c2e9361bc522b6d55c5f85ccf6ae
SSDEEP

384:31K67RpFif0SzOAlfeWLSgDVdCvBcJlsVmTiG3gwwR/ynb/sT8cXTuy:Xdw3BlfNLSgDz7uenwwwR/eEHXTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1fa52455440e6b13ca7d6d5f25a086_JaffaCakes118

Files

fb1fa52455440e6b13ca7d6d5f25a086_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b76bb977464656ae69eeee842eee33b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
Sleep
GetModuleFileNameA
GlobalAlloc

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE