fe8da063b0afcac27b5ebc0b9f5fdb9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe8da063b0afcac27b5ebc0b9f5fdb9d_JaffaCakes118
Size

34KB
MD5

fe8da063b0afcac27b5ebc0b9f5fdb9d
SHA1

d84f6d98c8766cd3c83d2f7a0dc9583839a80df6
SHA256

a9ac4de907822e92612b99f405e8d41b3c9c9eb6838cbbf02e8fdee043804d0a
SHA512

27425c428433ee690bf7d29954d80298e0e4b983d5249f8ee434d57ad03b6e6482a4a6ec5c905078514a4b4d7ba94707ee7cd9b7141b1260509297ace6a73eae
SSDEEP

768:jxEIp6BcLVGS3Zdr1cRJdIuCuWeMK8ZGIgFrltp:jxRii/5PXUmGIWtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe8da063b0afcac27b5ebc0b9f5fdb9d_JaffaCakes118

Files

fe8da063b0afcac27b5ebc0b9f5fdb9d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d1dacfa1f0ccee66403ab3fef91c2fa8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
LocalAlloc
LocalFree
CreateFileA
GetFileSize
lstrlenA
WriteFile
GetProcAddress
CloseHandle
ExitProcess
MoveFileExA
GetCurrentProcess
Sleep
GetComputerNameExA
TerminateProcess
GetSystemDirectoryA
lstrlenW
GetLastError
LoadLibraryA
CreateEventW
OpenEventA
GetModuleFileNameA

shlwapi

StrToIntA

ole32

StringFromCLSID

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sxxyynt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE