fb3451bcc31333396a73babbe57d4569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3451bcc31333396a73babbe57d4569_JaffaCakes118
Size

72KB
MD5

fb3451bcc31333396a73babbe57d4569
SHA1

52bd472edc95a2eece7a375b230d30dc8eac013b
SHA256

1fc926f1367d2db90f623f0bc01f613b3cc9b07d7b5810c8788a590553ff8f83
SHA512

786527af94a62d41fa0de1632b5fae623032a8b0407773c54a8395979894eed43584c9c0ccabc4b3a37328b27258484d6bc2ac2678f8f3f416bf51a5d21fb730
SSDEEP

1536:buvHUcBFLIVAk75gUuUEoUBnTp2wE8KK:iccDLIavJp2wE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3451bcc31333396a73babbe57d4569_JaffaCakes118

Files

fb3451bcc31333396a73babbe57d4569_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8ae4b86caac7841109af25524232d266

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetThreadContext
VirtualProtect
FreeLibrary
GetCommandLineA
GetLastError
ExitThread
GetStartupInfoA

user32

PeekMessageW
PostThreadMessageA

Exports

Exports

Awxeterlsgs
Qknquyq

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA21
Size: 3KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e4355
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ