fb936cb56296133008a2fdc133a58c99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb936cb56296133008a2fdc133a58c99_JaffaCakes118
Size

42KB
MD5

fb936cb56296133008a2fdc133a58c99
SHA1

e95ebff202f2136534c819f6cbfb172840043c00
SHA256

453f4c008d207c87700b62c2c5e7f339fe15b34726c2614a41f35e5bde7fab16
SHA512

954785831e024987be8809a4fddb1b6f387276f544c17b8000543bb5ff6fc2536b6363075fdf5319892d477e06e054810af5c5eb98bbd7ba58214b842cab0d50
SSDEEP

768:PcCNH+syPWjpRDfppUcUxaE+0L0EiP6YgXGsptUDzeP9Ld6k:B+sTLf3U7ZLRiP6Y4GqQeFLIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb936cb56296133008a2fdc133a58c99_JaffaCakes118

Files

fb936cb56296133008a2fdc133a58c99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

074745fd9ff3eae0e009c32dd12c5041

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetSystemTime
GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ