fb9f325e0ed5b9ff7e380af1858d2ab4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb9f325e0ed5b9ff7e380af1858d2ab4_JaffaCakes118
Size

192KB
MD5

fb9f325e0ed5b9ff7e380af1858d2ab4
SHA1

dc67c55f7e066c64de3ee3487869243cac43d5a4
SHA256

eafed1b9fb1ea7ec354feaae0e7489981e7e42e1d478cdf09018aa63bcce0d98
SHA512

9f3a51e240ffdbbaf41a9e5a27f705349dc5a919ef2bf43264800c422744f9bfa1a33897f6c5a5c3d64747e902436852a6b19b02532482c79c4a59f00e8baf2a
SSDEEP

3072:2OVSDUDbJxXn/1MSEvoH4A/q/pQMFyT7YVBW28H1tb4RD135dS40BaSgH8IhXe6T:2OjDTv1MBvKKyT7IeGhGa3H8GXt8hcx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb9f325e0ed5b9ff7e380af1858d2ab4_JaffaCakes118

Files

fb9f325e0ed5b9ff7e380af1858d2ab4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d406628ef65cd8bd136d3d6385888aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
IsBadHugeReadPtr
GetModuleHandleA
GetOEMCP
GetCommandLineA
GetACP
LoadLibraryA
IsBadReadPtr
LoadLibraryExA
lstrlenW
ExitThread
GetProcAddress
VirtualAlloc
GetCommandLineW

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ