fd6909e18240a5394734875f8e8f2e32_JaffaCakes118 | Triage

Sharing

General

Target

fd6909e18240a5394734875f8e8f2e32_JaffaCakes118
Size

140KB
MD5

fd6909e18240a5394734875f8e8f2e32
SHA1

79f8a2918a5f36593f48ead692c584f7c5343009
SHA256

c9f91daac6fc0accbf491eab4fed01d3ac40d3231a567abfe27b9e0434b0c577
SHA512

fd7ff635fe70fe7b8a5902de3b74913639a2bd5a1edbc359f5efd683052fb1d1fef7ac5e3a4953236f0ce648ef89e2f8054408f3d6032bfd7a3dfdd7e1d2acdd
SSDEEP

1536:zorgyrL8Lt9xC4Ss3y1y/z+eJh4iLh8KhC4G8Q5Jv:srgU8Txosi1y/z+eL4QzLG8Kv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd6909e18240a5394734875f8e8f2e32_JaffaCakes118

Files

fd6909e18240a5394734875f8e8f2e32_JaffaCakes118
.exe windows:5 windows x86 arch:x86

512e2a49660ec149a76d4744fec3a38c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
IsCharAlphaNumericA

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 619B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ