fe527f39193150256498d8cff6c5e76d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe527f39193150256498d8cff6c5e76d_JaffaCakes118
Size

54KB
MD5

fe527f39193150256498d8cff6c5e76d
SHA1

9ec559118a477e92f00b94763818118c428483ec
SHA256

4b4734260cf9e19719f256253665a4f0caa8ee8aac7f1f6a196fbfd1b57fae67
SHA512

8ef8f79b4bc6b05b6d5ea623446c37650e7bc46870d511f8c37fb535fc7e509eb49d9b982d908d15da5dab00b9e259127596ad4da455fc5c6f463de64f11c7c3
SSDEEP

768:QKBYifwKcDDquWlqeSpA7Vz6wyuEFLDEHs510KMTB24wyWi/EvWzcD:QYY4wZDjNRpATDHs519Hv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe527f39193150256498d8cff6c5e76d_JaffaCakes118

Files

fe527f39193150256498d8cff6c5e76d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

42ada3225c5d065ac1b0764d66b90899

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaW

advapi32

CryptDestroyKey

kernel32

GetVersion

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ