fb23204ec41c4faf73254b4dbf331520_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb23204ec41c4faf73254b4dbf331520_JaffaCakes118
Size

455KB
MD5

fb23204ec41c4faf73254b4dbf331520
SHA1

3eee4c4a49d79712182535e5972a0753dd4ee211
SHA256

5e535eb5f1f6fb436d0f7b6c0d128dbdcf7b6b89bfc1311797d6970cd1b8d726
SHA512

fdf62e03ea63029cba1b62224139e464d9d0bc6c311947f81261d75833302ee790b3302397da7083fed6789a1a0397fbf0ce118ce549e2ba946adfab15ccb974
SSDEEP

6144:eA6xM9luJprY0Uy+yvJ0bdre3I8A4u5iJ9rFC1b/QBuGyaU7DlsO5hW9Bv2iUtK/:dIIY5YXVjItJhF8QBTcqO5hW9AWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb23204ec41c4faf73254b4dbf331520_JaffaCakes118

Files

fb23204ec41c4faf73254b4dbf331520_JaffaCakes118
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE