fb27d19a976b6bc7c740572e88d8cbb8_JaffaCakes118 | Triage

Sharing

General

Target

fb27d19a976b6bc7c740572e88d8cbb8_JaffaCakes118
Size

25KB
MD5

fb27d19a976b6bc7c740572e88d8cbb8
SHA1

f52e8004d10f751c18b2a5419f08c9c1c5055524
SHA256

82ae819313e72138b756fa061db94ddac7190e1ec1507e4d21823055132f6a0c
SHA512

964960a900c5c7de73b4b2d6d05a3d770b8727fc934df7556e3e20938d8a298aa0aec7959a1f276f988620942bc0fc98826dde1167bde06964ae1713380fe302
SSDEEP

384:qhsLM31kKXyeDl8XIdOhbphhzCtCLsdJmhrUmTwS1v3euqGCIQ2B/aAV2Zt:wFfdB2IdUT10kCNSeuGIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb27d19a976b6bc7c740572e88d8cbb8_JaffaCakes118

Files

fb27d19a976b6bc7c740572e88d8cbb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

572ac795bdddd1d6e220dfb63be25904

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
FindResourceA
LoadResource
SetUnhandledExceptionFilter
Sleep
VirtualAlloc

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE