fc2e25c12013340ceaac52a871f73c62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc2e25c12013340ceaac52a871f73c62_JaffaCakes118
Size

16KB
MD5

fc2e25c12013340ceaac52a871f73c62
SHA1

c6ac3ded6a311d253fa0e68013675a6e39fb8b75
SHA256

91cefcf365ccd35a80c6a26015d6f3cea35f642de031345ea671741fd4ea899e
SHA512

275e301b8de833cb3a478ad92fa171d8d61af17a00658ff75a7f917d689bf0c91e7321295aa6440b4c8425a65add73dec3ce36422ec50fab256adb4c82456cbd
SSDEEP

384:CrVkBHM/yQNpHkbC2D9U5ugjWR1IoLAOFvHGZ1yLiu:CrVkR9QNpUnDu4gjuIaROgLr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2e25c12013340ceaac52a871f73c62_JaffaCakes118

Files

fc2e25c12013340ceaac52a871f73c62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7d270de265c914915e90b66b2776281

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindNextFileA
FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ