fe4ffed3df0b47b0c70763e9b879099d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe4ffed3df0b47b0c70763e9b879099d_JaffaCakes118
Size

29KB
MD5

fe4ffed3df0b47b0c70763e9b879099d
SHA1

fd6f866d73cda39714ed51e9220b0ef3b24ddfc2
SHA256

2515331fac203a2f86a27d03b1b737e295e74e0ec064e9398fcac9d1018e70e4
SHA512

99d9043be3ca79e3511914329db61511e4de4f61d142cf9d155555f5054ba6d6ced0b79b6285e511f2c3034183c5681164f8b22f4c5e4e8685983e149ceb5076
SSDEEP

768:rSA5ZUnlFm3F1JHhcGXHx6J3/Upuw0tOH4iR:rFWyV15jXHxi/UpZ0grR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe4ffed3df0b47b0c70763e9b879099d_JaffaCakes118

Files

fe4ffed3df0b47b0c70763e9b879099d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0012a9ffca20938104436dbeb8f204a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
ReadFile
CreateFileA
GetProcAddress
GetModuleHandleA
CreateMutexA
OpenMutexA
GetFileSize
CloseHandle
GetStartupInfoA

msvcrt

_except_handler3
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
free

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ