fc2ba8985fcbc2af96c7e4fe1ad91135_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc2ba8985fcbc2af96c7e4fe1ad91135_JaffaCakes118
Size

152KB
MD5

fc2ba8985fcbc2af96c7e4fe1ad91135
SHA1

aad72716352e28baeda5b972ca76f7d89089f956
SHA256

0d84572cd09ab00c4f2b6e25efa571cc27e8b0259f1c9b33df0d6c18e1312286
SHA512

a89362d3a08cf8b40d620122747819cffc8bc22bf60a9cc5e933c097e42b0326f2104b3b57328d9f6c8e75c1dd247d15229911288029c3d3b78b36e03d6ded31
SSDEEP

3072:A1YqcMuHroFIqO/Dj0v9tRVk0MP3rmoqxlId0SL:PkC/Dj0v3A7WydL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2ba8985fcbc2af96c7e4fe1ad91135_JaffaCakes118

Files

fc2ba8985fcbc2af96c7e4fe1ad91135_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf080ee4ee2f14299074bf841d91c2ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
GetSystemDirectoryA
GetTickCount
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.rdata
Size: 4KB - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ