fe3b99d81bd05cede206eabe9bb2188c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe3b99d81bd05cede206eabe9bb2188c_JaffaCakes118
Size

145KB
MD5

fe3b99d81bd05cede206eabe9bb2188c
SHA1

ef7a0fbd7bbfea9850ee86b0b3b330dc1d539f45
SHA256

b852627a6fe9f8eca1c0eb6e7cc714e84fe4d15c66b6225d598ae0e1ae8533e9
SHA512

3048d6b634a71a0f65ef2238215877c689192815e038ffa0c0f4a474745d50d9b2b54ac1169c5fefe50322a148c6dcd5abade9b66507e25ebea50a6f9cc5e43b
SSDEEP

3072:NQEO7XSZdHfEqZobyZdfFuxNn5suekl+HFSvKzK/pz:WhTm8F2PMTn4kGQys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe3b99d81bd05cede206eabe9bb2188c_JaffaCakes118

Files

fe3b99d81bd05cede206eabe9bb2188c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

70715147bb57581ef58a90abd512ef39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetDefaultCommConfigA
GetConsoleCommandHistoryLengthA
IsDebuggerPresent
Thread32First
IsBadStringPtrA
VirtualAlloc
GetVolumeInformationA
GetEnvironmentStringsA
GetVersionExA
IsBadHugeWritePtr
GetEnvironmentVariableA
GetProcessTimes
HeapAlloc
GetDllDirectoryA
FindFirstVolumeA
GetCommandLineA
OpenMutexA
QueryMemoryResourceNotification

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ