fe6528fc1b0f5511233c61c6c7eb31f4_JaffaCakes118 | Triage

Sharing

General

Target

fe6528fc1b0f5511233c61c6c7eb31f4_JaffaCakes118
Size

113KB
MD5

fe6528fc1b0f5511233c61c6c7eb31f4
SHA1

54f0c0b1ca34ad73d23c1a976f14bb8684ed189d
SHA256

492ee446c6fbacadc04f7f7312fdf1583d4cd2c60c18b7a40b79f296bfebb512
SHA512

79e0fe2cf1f53d05824621bcf144f29c6a929e5233b768f57409770ff3e706861b894342fb5dc16df8adb2660601bf3b13b10e0bfaf6da4912fe302cdb91fc91
SSDEEP

1536:xYLGLDYuo1YlfTX4nxj9tqXWE8wRTEqYPRYuw0LyFqBJfjmIa:xYLGLDY/YlfTInxjXqXRRCVJCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6528fc1b0f5511233c61c6c7eb31f4_JaffaCakes118

Files

fe6528fc1b0f5511233c61c6c7eb31f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f81d9f879d4d2261b5bb96f3f0fb9a7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetOEMCP
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ