f6b849d45cbe49f686f245f77f864d3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6b849d45cbe49f686f245f77f864d3d_JaffaCakes118
Size

30KB
MD5

f6b849d45cbe49f686f245f77f864d3d
SHA1

c12664406825bd64dd9065aee8ef7cac081a4831
SHA256

efb4aa4d67472324e4846bc86d02e329616c5de80572c64d7ba547d59b341c30
SHA512

e2afd36712b82867032d1f60d1392b2c430f24ce1d6513759995be6c9285a4aee6a9d56bd250e43985379a8a83f0e271881997b166a8bf586aea7aa98a96e33a
SSDEEP

384:2XBt9I5Pr+B+YjtFR1gcxZYLaFacPbc7v09GLG0u/eAmDFbW8Gl6:0II0ibxcOaKbcuGL/1D8l6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b849d45cbe49f686f245f77f864d3d_JaffaCakes118

Files

f6b849d45cbe49f686f245f77f864d3d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

524b356d3700ff4d0944b02b6c3acf22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
GetLastError
GetProcAddress
GetModuleHandleA
GetStartupInfoA

shlwapi

UrlCombineA

setupapi

SetupGetFieldCount

msvcrt

__setusermatherr
_onexit
__dllonexit
memcpy
_exit
_XcptFilter
_controlfp
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.code
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ