fa4cff4453534623a28c0e1ada25cd1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4cff4453534623a28c0e1ada25cd1d_JaffaCakes118
Size

37KB
MD5

fa4cff4453534623a28c0e1ada25cd1d
SHA1

85ff194436140919208f89d7382185e1a2ec3ee1
SHA256

fb3e9e8a2916d4d1e1a3ff1af071194cbbc9dc9fec35e85c8a8e0ac7aa5220f1
SHA512

a678b5386506c8a31c47875c12d8a57744b4f04de53a4a996539b737951e22ec6caec6d45ef37dfe908760326b08ae3259117e31daa90ef1d27f9e6a9a6c06d3
SSDEEP

768:Km08QotiCjJuPGw4Xlsk9S3TNF/OrCJmx9/KT/:Km00tiCjJuPGw4tSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4cff4453534623a28c0e1ada25cd1d_JaffaCakes118

Files

fa4cff4453534623a28c0e1ada25cd1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e5509fc08199fda59c06d2ab67f46dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

GetCommandLineA
ReleaseMutex
FreeLibrary
GetProcAddress
LoadLibraryExA
SetCurrentDirectoryA
SetErrorMode
WaitForSingleObject
GetLastError
MapViewOfFile
ExitProcess

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 512B - Virtual size: 477B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ