dca0bbd3b4fea714b8a8678d47a1adf3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dca0bbd3b4fea714b8a8678d47a1adf3_JaffaCakes118
Size

437KB
MD5

dca0bbd3b4fea714b8a8678d47a1adf3
SHA1

d59dfd2d465519d139736d4428fa7157eef88d3b
SHA256

e622b2635580a9666e91e35bd311886fcbfb64be4374662409a8c38b30310dc9
SHA512

745a8dff9bc0fd5b9db09a54adcba9d90a26a09660e50f3034c092e37a15ba747375580e4279926b7aff8e870fd1f876f6a1b9a80746de031764f6017e598e1f
SSDEEP

6144:FcflsrkzGdX3AxM7zw08RnBN3dqmzwt4eFj6n5pwsoZTHkK:Fcdz6dnAxicdnPzzOjSpL8TH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dca0bbd3b4fea714b8a8678d47a1adf3_JaffaCakes118

Files

dca0bbd3b4fea714b8a8678d47a1adf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560f66eeb453048abf6a7166b008c84e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ