fbbd98cf7586370e7b61a698c18e0e2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbbd98cf7586370e7b61a698c18e0e2a_JaffaCakes118
Size

175KB
MD5

fbbd98cf7586370e7b61a698c18e0e2a
SHA1

b745cdfd233a5a622aca67b1276ee81a12bf4d79
SHA256

0a3d2c2a2e66dfec458b5d857d654e084173fd963160961419ce58f103828784
SHA512

3bef66016c89eb8262d22459ac4096b3c243d588445ea3eab06d89b037b6eb1d15f8eb26d54eed582f92ab65b72eea8c07f28867e76bf408d074d08a84998019
SSDEEP

3072:QqXJrPW6HHj6UZ3enNPRHUyBP/SAZ0kBkf4SaqmSjg13nuZS0xgE:QOrPTHj6c30JyyBHSAGkB0ba1xcxgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbbd98cf7586370e7b61a698c18e0e2a_JaffaCakes118

Files

fbbd98cf7586370e7b61a698c18e0e2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

642d5d8d65c83dac8167ed1da7bad24b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
CloseHandle

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE