fb14201b2d35def11fc5d10316422d02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb14201b2d35def11fc5d10316422d02_JaffaCakes118
Size

93KB
MD5

fb14201b2d35def11fc5d10316422d02
SHA1

63fd1856d7145d8f46e3cee64475a36c098f4ed1
SHA256

f094ebe7b5564aeab78de37c0cba5b39cf7e66c4a86cb3b1c3776290a1cb180f
SHA512

385406ee97ab82cd90e20a4e04d8d5a284570f28cd949c148a77818e3093a741d3552188875357e37fee9f6c778b0cac17a172f32dd7811ab0b0fb8c90fdbf75
SSDEEP

1536:nR/UNRNUOEUCaFRi3mNbO7snddFsClj/yFQZz0RAyralZDQ4:n1UNRNUPtSRi3m1ksFsS6QZA2I+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb14201b2d35def11fc5d10316422d02_JaffaCakes118

Files

fb14201b2d35def11fc5d10316422d02_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7b38bc18ff7dceb0b5587bae024c8572

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
RaiseException
lstrcmpiA
ExitProcess

Sections

.sforce3
Size: 26KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ