fe6770fb09b9b5e8030426f3d5ffa9a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe6770fb09b9b5e8030426f3d5ffa9a6_JaffaCakes118
Size

21KB
MD5

fe6770fb09b9b5e8030426f3d5ffa9a6
SHA1

e711ebf81b54249fe1a796f03c69d5f0fbe204fd
SHA256

c70c771a8b15386675c623e270375775eea69a9d23fe2b34bf3b8524e0f3d5bc
SHA512

9430be3b2efc5f8fb8f50e09302a54cf776ad15ca24aa652682f507a1fc3038a9754b15b56ee045c81e068ff9900786dca2e445dd656e1fc876c5109d7e0acc2
SSDEEP

384:a/MNfpogybpNx+DaWjRRwIGXfKY3C8U7SOfVEhBeagmmK:FogsW/GXpCpSOyh7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6770fb09b9b5e8030426f3d5ffa9a6_JaffaCakes118

Files

fe6770fb09b9b5e8030426f3d5ffa9a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dff0ee978119ea4b7bccbc9463297b44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateThread
ExitProcess
GetProcAddress
HeapAlloc
HeapCreate
HeapDestroy
LoadLibraryA
Sleep
VirtualAlloc
WriteFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ