fa19cf0e87603ae65d298805e141f45e_JaffaCakes118 | Triage

Sharing

General

Target

fa19cf0e87603ae65d298805e141f45e_JaffaCakes118
Size

61KB
MD5

fa19cf0e87603ae65d298805e141f45e
SHA1

bd0822abb713e2a847fa5eb8b128088c32f55f6f
SHA256

2f11ba5369dd0325a12e1e8b1b560a4c58cf19e01afdec2f120faf3f18bfdd46
SHA512

5632ac77a3808d5887bbf5130f9deff6d77c0d3212f6be099341eef219f00422c454a113c66269179a013fb1797a890b2c30099e542d9147e87082a2718025b3
SSDEEP

1536:F9T9hz9j0PMRU/bKFfm1Y3pczniVVprJfTpV+9hj5lSDU:vaPUU/3UpXPLX+9hj5lOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa19cf0e87603ae65d298805e141f45e_JaffaCakes118

Files

fa19cf0e87603ae65d298805e141f45e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stext
Size: 4KB - Virtual size: 512.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE