fc5aa4229675a9a217efde7bc9f70bae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc5aa4229675a9a217efde7bc9f70bae_JaffaCakes118
Size

94KB
MD5

fc5aa4229675a9a217efde7bc9f70bae
SHA1

7d87509014eb79cec0bb804932999077800dcd53
SHA256

79dc404ab21d4dd84fb8b14f2616965eadb8df36a3fb96c667b922ba64b3c403
SHA512

716313665d47a7d3fcde4b2449ae6fd4efd7f665fc87335242364a4f17b69443bc25b8c2b934ec49a46a404fbda717caa5088cd19a1467263e8bf6e482d84490
SSDEEP

1536:0uITPwtX//4ZpPztkaXe6gBecn7WA5SHnobwg5GbwZxTevejMBIM3LvsqKSs5:0u0PQ/AZAaXe6gUS7eoZ5GbwLNMBvzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc5aa4229675a9a217efde7bc9f70bae_JaffaCakes118

Files

fc5aa4229675a9a217efde7bc9f70bae_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d9e14945c3974fd1f488b128cb6adb49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PeekMessageA
SendMessageA

Exports

Exports

ReadBexyynuah
Sfkqtrrpg

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 8KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ