cf7e4fdcb00d419fd8915f7b52fb0fbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf7e4fdcb00d419fd8915f7b52fb0fbc_JaffaCakes118
Size

65KB
MD5

cf7e4fdcb00d419fd8915f7b52fb0fbc
SHA1

bee8327bd47ea49f7c9a99c8d345a4266acd6161
SHA256

e3737e546e87f91831b5c0dd37de516f2e3598d3da73af3842cee3f4452914de
SHA512

9f2d2357b06de5e615d609b66ea2fed834448b45fbda9c40caf0666f1e8b7391b9d529a210fcc3ded4313f9b8a370136c3cde3ee02e6b633924f72f897dd6770
SSDEEP

1536:umR9oD/JHc7FQJJjs1WjCuL4fEhJMMp28yJSx3v9Cc/fYBUY:uge0Fsjs1WWuL5fp5xf9L4aY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf7e4fdcb00d419fd8915f7b52fb0fbc_JaffaCakes118

Files

cf7e4fdcb00d419fd8915f7b52fb0fbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d0da584648aa3f010e48fcbadcc9991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetProcAddress
VirtualProtect
VirtualFree
LoadLibraryA
VirtualAlloc

advapi32

QueryServiceConfigA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ