fb7f12d52b963294acc19a316d454e73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb7f12d52b963294acc19a316d454e73_JaffaCakes118
Size

123KB
MD5

fb7f12d52b963294acc19a316d454e73
SHA1

45258ba67d39a8a69f722f9055836b5f962b4c23
SHA256

1b1137b78c01cf65cc60b832f761d31b8ae7e6829dde08349c40c6d0f29bdeb8
SHA512

85224f4443445ae511b9251c4e06f8dfd346953160e19ba645a43c355840924d82243b29847587db48ea944f232ea39c8d588bd0f33fc3b503d40ba57d602cc1
SSDEEP

3072:Vlk/R1gfEzn1S3ZLYn7jPi7FYo24j3yuQ5P:VlKRIYn7mRYo2W3yu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7f12d52b963294acc19a316d454e73_JaffaCakes118

Files

fb7f12d52b963294acc19a316d454e73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0249a6a0570c835b3a4e210b910a600

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memset
wcscat
wcscpy
strstr
strlen
_strlwr
strcpy

kernel32

lstrcmpiA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ