fa6040e0bede8a4aeb014012151e2d4a_JaffaCakes118 | Triage

Sharing

General

Target

fa6040e0bede8a4aeb014012151e2d4a_JaffaCakes118
Size

276KB
MD5

fa6040e0bede8a4aeb014012151e2d4a
SHA1

56e95be57180ec90da56afab2c76712e00f82624
SHA256

12087418133383ac3748badd82dbb8ec416a542a2641f191e373fec4d91f8f08
SHA512

3e7d69b87b53985fa1db6d563ee9c6de101afbd8fadf2e085f3250c50cbe7f4a4e071cbb15edac80e234f201beb322af963ce96b011827ad17c32795b441e67c
SSDEEP

6144:YCTrzmYgUohB1b4WcaMLSthS9sceHhmr9H+UBup7PphJ:1THEOZLGhpckmr9HVuFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa6040e0bede8a4aeb014012151e2d4a_JaffaCakes118

Files

fa6040e0bede8a4aeb014012151e2d4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e25ce123e24f68eab3c76ca4bb0ef039

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
GetTickCount
FreeLibrary
GlobalFree
LoadLibraryA
FormatMessageA
LoadLibraryExW
lstrlenA
EnumResourceTypesW
GetSystemDirectoryW
RaiseException
SetUnhandledExceptionFilter
MultiByteToWideChar
CreateMailslotA
GetLastError
IsDebuggerPresent
GlobalUnlock
MulDiv
GetCurrentThread
UnhandledExceptionFilter

gdi32

GetStockObject

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ