fd4bb7f41ac9f610ad27812c19e93dfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd4bb7f41ac9f610ad27812c19e93dfc_JaffaCakes118
Size

258KB
MD5

fd4bb7f41ac9f610ad27812c19e93dfc
SHA1

d830cca97ae3fe2aca26d35c845598b27540e8f5
SHA256

8b3643d366c9a4252b2ee2d3a720b6ea0ea927634345086d90c16c93e07d92d8
SHA512

76c40dcc136fb57e02b143c42f8095bec53d81f3e5a4c3dcc125a30c9ecda90061b2d637099426d26579d7986cb888eac73d45cfbe74439ad29aa8b3b3881183
SSDEEP

6144:HSXrZkni7zGLOA/RnFkoovhOzOcMiAGN38uJS:yXmAGHI/v7xyN38uJS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4bb7f41ac9f610ad27812c19e93dfc_JaffaCakes118

Files

fd4bb7f41ac9f610ad27812c19e93dfc_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a4d617902e56461af109b36ff3ebe77c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
CloseHandle
GetTickCount
VirtualFree
LocalFree
GetStartupInfoW
VirtualAlloc

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ