fa21abc73858ec40c3510060dd13ea94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa21abc73858ec40c3510060dd13ea94_JaffaCakes118
Size

52KB
MD5

fa21abc73858ec40c3510060dd13ea94
SHA1

639348431773eef445e52b97d078931774802a67
SHA256

130cfc1ee8ca83abae38a95b281dd04a9aee3e97753c236992dbf719347af666
SHA512

a3f9fe89d85126cd6b97cc3a35876ff460df275b4c5f312ee9696c59c19a1277fdb5bf8e76a78af74490cecab3abc194d75419ab61211f176b5849adf3b9a4b4
SSDEEP

768:SpPjL0WxkOl7u2m7T0DXlNbXzIcIxs60oLspIxMf/EPRUzzLpyQbU6pgG:SpP5/kd0L6v3Lseuf/EPIzLpPbUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa21abc73858ec40c3510060dd13ea94_JaffaCakes118

Files

fa21abc73858ec40c3510060dd13ea94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c71388e384fa8d26ecec1f0da9a7e67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToCacheFileA
ReleaseBindInfo
CompareSecurityIds
DllRegisterServerEx

ntdll

LdrShutdownThread
ZwSetInformationProcess
KiUserCallbackDispatcher
LdrLockLoaderLock

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE