fd9abb84fd46ab6819f6af198d48ccb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd9abb84fd46ab6819f6af198d48ccb2_JaffaCakes118
Size

182KB
MD5

fd9abb84fd46ab6819f6af198d48ccb2
SHA1

30aef771bbd6a52daff1e98731eddb55cd5c523a
SHA256

00f8f997da25c1a5f83946dba3dd5eda73d98f90155071270b0ec6fcbd863e65
SHA512

f6a6da5441101dee43d46ac589f07ab1c0cb66164fcbf36f78941541dd6804220cc0bd370db392532486e2be9364ac25ea01e12495dac225b847109d45419cdd
SSDEEP

3072:yzFz2HsxxXvhxYvRvrthnd0o8MBHOmLd+8zocmQKvoZlz9Mddf6KcQR5bWMZ:CKqvhxMd3dXDBuU5ocmQKvoZRKdR5SMZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd9abb84fd46ab6819f6af198d48ccb2_JaffaCakes118

Files

fd9abb84fd46ab6819f6af198d48ccb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6302ed8d91e5217194d089c0903cab96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
TerminateJobObject
FillConsoleOutputCharacterA
GetLocaleInfoW
FindResourceA
ReleaseSemaphore
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE