fb8e91c18e6defe64dbe46ce3b511bb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8e91c18e6defe64dbe46ce3b511bb1_JaffaCakes118
Size

80KB
MD5

fb8e91c18e6defe64dbe46ce3b511bb1
SHA1

9dae2e2755fbf13e279d9fe22b53115ac6a1b5e4
SHA256

c047e7d119657214e6c9a592c49b87a8ec93fd4fc7182ae5b8dab32077bcdad8
SHA512

4ae6f9d34b8a0b5844690ad35fd3c486bec7d8a346b37d1e02f13697b77d011e2518a39233576264ce5c21201a3177f9e6b2904eaa9deba07ce38fbb695bff75
SSDEEP

1536:vq7qlhcgdOguAsUEbrYjArpWqCx0UKBVbAWMJkijrZQIDcTCZPs0v:jlhXoguAdEbMepWq0KB9okijl7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8e91c18e6defe64dbe46ce3b511bb1_JaffaCakes118

Files

fb8e91c18e6defe64dbe46ce3b511bb1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6eac8392c9a428c9f45b998797923d87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtAddAtom

atl

AtlMarshalPtrInProc

kernel32

GetCurrentProcessId
DisableThreadLibraryCalls
GetProcAddress
GetSystemTimeAsFileTime
FreeLibrary
GetTickCount
LoadLibraryW
SetLastError
QueryPerformanceCounter
GetModuleHandleA
VirtualAlloc

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ