fdec483245494bcb936b4357b2258701_JaffaCakes118 | Triage

Sharing

General

Target

fdec483245494bcb936b4357b2258701_JaffaCakes118
Size

98KB
MD5

fdec483245494bcb936b4357b2258701
SHA1

26a551af6aa9f0ee2bfd2225f37fc3d620a8739e
SHA256

06fe15673d9bb5c13128a859df6a0abdafba84651d13932b35e1c96e02e1c4cd
SHA512

a2819ba43fabf1fd8c15c344c81f5cbecf63e6ecfb31472fa45acc54e0576241785563c0ad25e36bbe0dbff4318c4e384112d5154067ec3de654fe888d27efad
SSDEEP

3072:/0VMoIKDj0c0CJBecUYzlzrMvHU+aWGZL:cBGdY5ID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdec483245494bcb936b4357b2258701_JaffaCakes118

Files

fdec483245494bcb936b4357b2258701_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d05fb31809428dfa6ee0a27d9c9ff8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FindFirstFileA
CreateHardLinkA
GetLastError
GetShortPathNameA
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA

Sections

.text
Size: 78KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE