fa81633fb656eb4a2b02a91f7b8ea5bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa81633fb656eb4a2b02a91f7b8ea5bf_JaffaCakes118
Size

482KB
MD5

fa81633fb656eb4a2b02a91f7b8ea5bf
SHA1

408391c95d274fa34040c40981e53cb6e57cfb40
SHA256

2d09680aa6af2f1fdd28bd30a86622f84e7d20ee66d1c0c5b34792737ca5b21c
SHA512

c398b77a2725970075a42c8e8f72355b5a2a21b7beea27c051a898ab6c1daaa15c84306af93428052762b3cdc178c9cf00c7e41d55cd9a8f431c354c02ae4394
SSDEEP

12288:lRDW4JKw+EkAVYQAz/aJpH0q1of8XJN3mum:fqKp+EkkJCC0qKf8XJNWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa81633fb656eb4a2b02a91f7b8ea5bf_JaffaCakes118

Files

fa81633fb656eb4a2b02a91f7b8ea5bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7ea1ac72006ebd4f36b4452264a9dfba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\inetpub\Temp\3ecco6dv6kh63qj32elnfjuk03\Stub.pdb

Imports

user32

LoadMenuA

kernel32

HeapFree
GetProcessHeap
WaitForSingleObject
CreateThread
VirtualAlloc
GetProcAddress
LoadLibraryA
VirtualFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ