443b7ebb94d106765c52e93fd94dc754_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

443b7ebb94d106765c52e93fd94dc754_JaffaCakes118
Size

67KB
MD5

443b7ebb94d106765c52e93fd94dc754
SHA1

0e531b00f0fd57436c7edd9b63ab62ded7d36a06
SHA256

f3393f4358913f7113a95169d9b90b21a159b9da6bed14a9fb96342e36888731
SHA512

b552b99ec423c55a1d9fc2a89f59789097ce09b3804fcbe0a2f2a120b334d79371c8edb9ba5af0776f0688e1c749021a0f61393645fcfb03c97011c29afb84a2
SSDEEP

1536:21FP3rdxHYlP3JpPbIb3Dl1N+8hihY9k25:2HpGlRpPbItp9k25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
443b7ebb94d106765c52e93fd94dc754_JaffaCakes118

Files

443b7ebb94d106765c52e93fd94dc754_JaffaCakes118
.exe windows:4 windows x86 arch:x86

330ae68fd35ae99521a0ac6a1fd9b999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

FCryptor
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ