fb4ad2e802e1a632333fdc9b872c59ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb4ad2e802e1a632333fdc9b872c59ed_JaffaCakes118
Size

76KB
MD5

fb4ad2e802e1a632333fdc9b872c59ed
SHA1

618881a81058250a868ff4f86eae77cca4e7723f
SHA256

aac9114cb6ba3ca99af24f8c39cedb4719b732a938d474a7ea2b2daf0dfb682c
SHA512

cf52b439b73f3319c3d435b3aa40c4dd9bc277f214ac00f5805b776ce9a3cead3d8f679524e1c6f9c3beb343a2922514d55aaa9b1bf5a074181c49f2e98ee56c
SSDEEP

1536:TvghmR68PzaVBL80CGUkhgnUpjVrs2ryrd1vUQuq6:0hmRxPzqBSoHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4ad2e802e1a632333fdc9b872c59ed_JaffaCakes118

Files

fb4ad2e802e1a632333fdc9b872c59ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae566fc35fcfa8c2a6ccaaace1909e57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InvalidateConsoleDIBits
GlobalFindAtomA
LoadResource
CreateEventW
GetLocaleInfoW
WritePrivateProfileStringA
FlushInstructionCache
lstrlenW
BuildCommDCBW
SetFirmwareEnvironmentVariableA
GetStringTypeExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE