fabd11dc86c040121f966694c977d662_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fabd11dc86c040121f966694c977d662_JaffaCakes118
Size

857KB
MD5

fabd11dc86c040121f966694c977d662
SHA1

c88ecfe3b03b52d19d6afb532c0402cdb3d0cb25
SHA256

7c2aeb8d9e9a4d2c11ede3e074358800632347a445b88798f3a4de14b445c515
SHA512

ad2adf84412051bbd72a9ee8c4f33988bb4df53157e6179ed78e1286f1f32e15344539358c4a7fb10cb56ba03c75af58fb99df9f423e158fc7ca1b1297ecc36b
SSDEEP

24576:dA78/eSlW1c98PkHJQ0hYt3fpQGRP3nNAA8MJW:dlPWL+7hYdxQOnav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fabd11dc86c040121f966694c977d662_JaffaCakes118

Files

fabd11dc86c040121f966694c977d662_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52f489eb252c8562e773bc6f9a87a086

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
MoveFileA
GetLastError
GetSystemTimeAsFileTime
GetStartupInfoA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ