fdee09fb42d9505c0393fa29f0a97585_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdee09fb42d9505c0393fa29f0a97585_JaffaCakes118
Size

284KB
MD5

fdee09fb42d9505c0393fa29f0a97585
SHA1

97cba8bd07f58a6cf251251bfa62a11e0e4c1ae0
SHA256

96cf229a02c7d737d75bf3ca881962f5c3e82ceac9402eb19856e40a23790c65
SHA512

04a38b07f42a21e08e1d2dc5f48898f9982a9b753ef006074dedee1034305699fd0319de29b7fb1e8c26546bf1cdbe60682530dfcc036416d3614b055e94bbc8
SSDEEP

6144:elK0dnCsgTLjlkixCMdQLYnzrA9MMX3TmNkKyK:elKcq2ixdLzrA9MMzmNkKyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdee09fb42d9505c0393fa29f0a97585_JaffaCakes118

Files

fdee09fb42d9505c0393fa29f0a97585_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ