fe2326e172ddbb02a3140b22e8edb44f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe2326e172ddbb02a3140b22e8edb44f_JaffaCakes118
Size

111KB
MD5

fe2326e172ddbb02a3140b22e8edb44f
SHA1

b0b360855fe6346ab8cfca7a44f24ceab1d7344d
SHA256

4a81f3cf9ca8663cb57c1292f3c477311965d6d71d4c480eb10d55c4562c41cb
SHA512

cdb7e11346a9a058992afccde8948f538124f698d5f6a98b0359e7d4f28b53c6f67bc2b79dec3c2a22579a4e6595d38bad0b4e35030bbfddfee97300a48f0518
SSDEEP

1536:XV8Jlf9mm/Ue0BH11uz/ANUyHGJWnuUx1XZhuS961EnNMdVN2Qu/ucXAnv7U936t:XGsdBV1mGUslx1X7E0CdVNdAucXOv7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe2326e172ddbb02a3140b22e8edb44f_JaffaCakes118

Files

fe2326e172ddbb02a3140b22e8edb44f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

445ade074138813916b65a0863149006

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetStartupInfoA
LoadResource
SetCurrentDirectoryA
CloseHandle

Sections

.sforce3
Size: 27KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ