fe721d675e62ee960c3e2007c0d7bd43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe721d675e62ee960c3e2007c0d7bd43_JaffaCakes118
Size

37KB
MD5

fe721d675e62ee960c3e2007c0d7bd43
SHA1

92e6938d766098bb0dd3cbbd6c4b927ba91ec6ea
SHA256

6233c5af449ecab6d8347ab980d1134ca4eaf32ff5921b13706bd002c9e1a14f
SHA512

0f4a3b4c7c9576f71b8f0391f9deed2b61a697b37d3eb2bbe6ee51ae308ad1d379722851a69a48faae1dea709d709e4fe18c689853fdb9f05ee4cb5cd3a6255f
SSDEEP

768:WNf9lLQ0dZfyPb7P8FIUwi8zhZ19Bdi4U8qQ2n:WNFlHkPPZi8zhZddPRbO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe721d675e62ee960c3e2007c0d7bd43_JaffaCakes118

Files

fe721d675e62ee960c3e2007c0d7bd43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a863db4d20c8207468d7571ead70455

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
memcpy

kernel32

GetModuleHandleA
HeapCreate
GetProcAddress
LoadLibraryA
SetLocalTime
HeapDestroy
ExitProcess
CloseHandle
GetCurrentProcess
VirtualAllocEx
HeapFree
HeapAlloc
WriteFile
CreateFileA
SetFilePointer
ReadFile
HeapReAlloc

Sections

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE