fd25daa3208b815f3a150559a02bbf40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd25daa3208b815f3a150559a02bbf40_JaffaCakes118
Size

143KB
MD5

fd25daa3208b815f3a150559a02bbf40
SHA1

b2985c6f8db4b1373b73cdda4b2f14fe167c21fb
SHA256

c355f4664e8f374ab8b3a293959e0fa4ff4f81f7c92fc0409b4a49d9ff949a22
SHA512

f96d3f82bd74ba7d0c4609799efacadd5ee1391cef1a5016f83e12d641830a2780aa1c6ae9972f2f5557664acf49d87d49883a28c1c0f75438d4af20201c5b7c
SSDEEP

3072:3lxFCaMc/t+6L+SqvDniMVpHhF3lt8v79EGaAI7XdEQ:6R6hUD9VpHhF3lev7SGaA4Xd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd25daa3208b815f3a150559a02bbf40_JaffaCakes118

Files

fd25daa3208b815f3a150559a02bbf40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b0bad9780255a7ea26fd840cf2b2578

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
EnterCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
LeaveCriticalSection
LocalFree
SetLastError

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ