fe45ad5ad80261f272f608beecc7b9a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe45ad5ad80261f272f608beecc7b9a2_JaffaCakes118
Size

4KB
MD5

fe45ad5ad80261f272f608beecc7b9a2
SHA1

8f35b48239f5f451019e1f4f1893ebf9ac9c67dc
SHA256

3091252c3b483780762a386477cfdef42d2c2fe53284bbb409edd3bdd52ff396
SHA512

43a3c2ec458ee013fa7b3388c05d51cc6b29d5a7e22c0f99adc4fa5f05a3856c2bc4d74c8352015ad100d0acc73e5a1307a63551c3dc77d624026b39458387ed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe45ad5ad80261f272f608beecc7b9a2_JaffaCakes118

Files

fe45ad5ad80261f272f608beecc7b9a2_JaffaCakes118
.dll windows:1 windows x86 arch:x86

cb69f29423acd58dca02c33642b5869e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
CloseHandle
ReadFile
GetFileSize
VirtualAlloc
VirtualFree
DeleteFileA
WinExec
Sleep
GetVolumeInformationA

urlmon

URLDownloadToFileA

Exports

Exports

ServiceMain

Sections

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 695B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE