fb01094ced5f322c8bf5e11c9c31fc17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb01094ced5f322c8bf5e11c9c31fc17_JaffaCakes118
Size

788KB
MD5

fb01094ced5f322c8bf5e11c9c31fc17
SHA1

58c39ed8841bf06106d2d4ad0bfdb61f597d2a40
SHA256

a36ba1ba98e148921e6275f180daf589accc5a3245c4b18ee3f88cc2a68957fc
SHA512

18f8643e0d37a9116408d2df192f58c2719f50b1da89adb4b2c42941ed34ce54a39681451178b89a1fa742cc520a25ed24b96b6aa9fecfd379567becf285305a
SSDEEP

24576:4oL3iLQFFFFw54darCh3JFJNayzxwSagbL:4oLSLd54/h3nDvxfbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb01094ced5f322c8bf5e11c9c31fc17_JaffaCakes118

Files

fb01094ced5f322c8bf5e11c9c31fc17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03f1dd65201f0c19f18067dd140b7645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
GetStartupInfoA
RtlUnwind
GetModuleFileNameA
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

msimg32

TransparentBlt

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ