1bcfedabe2261bf2336f101eab3eb580_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bcfedabe2261bf2336f101eab3eb580_JaffaCakes118
Size

331KB
MD5

1bcfedabe2261bf2336f101eab3eb580
SHA1

6fdb8e45441891fdf7cdad66bcd50e3f6fa0ef4f
SHA256

0cc62008ab58b0957c4f62d2b8be066baa313e913f926b74d0117b3ea1a85ae8
SHA512

95e20a50ae989bc2d64c5d7c7c280910530fb65bf5f972d46100fc40575c67120f65558f405a26d4f1cb3f0b755b1a7f7be68434806d83efd77f76ce260d52b6
SSDEEP

6144:m+FC9drWFyuz0JhyOgMx7aMEel0qK47/SMxldUkhooXwB5kfiVij:RC9cL0JTgYlEdqfz3xbV6oAIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bcfedabe2261bf2336f101eab3eb580_JaffaCakes118

Files

1bcfedabe2261bf2336f101eab3eb580_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83f5f953dd242a3c8c65c3aadde3be34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
CloseHandle
GetModuleHandleA
GetFileSize
CreateFileA
GetProcAddress
VirtualFree
VirtualAlloc

netapi32

NetDfsRemoveFtRoot

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 950B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ