fe0b4a54f737dde5a20a6fed7b7df20b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe0b4a54f737dde5a20a6fed7b7df20b_JaffaCakes118
Size

38KB
MD5

fe0b4a54f737dde5a20a6fed7b7df20b
SHA1

2f5ee4a558bbb6cf0e3ffc171d5f326e08d5e26a
SHA256

426c2fef7fee3546899a15d10de9c99aa9a15dce3719bfac9439812aa53dd238
SHA512

5d56825042d608d9c8ef0c5062784a4d5c96c099392a8cd245a899fd4a26a14608b39d5ea3c5b8c9cdc007b3b3d1019ee6d163092449a59c3fc451d98fd741b8
SSDEEP

768:Xvvov6h8+dbSOjq4HZ+wLf7mYJJXdNdpAuVr33BqYWo8P9UREMB2ja01mX:/AChDeOjJHZ+wLf7VJJXdN7QYWqSMYa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe0b4a54f737dde5a20a6fed7b7df20b_JaffaCakes118

Files

fe0b4a54f737dde5a20a6fed7b7df20b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d9e4dfb9660ece27ef87af7dde2648e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
QueryPerformanceCounter
HeapDestroy
Sleep
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE