fc963d1929299cc8f36ce46ce86c9a8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc963d1929299cc8f36ce46ce86c9a8e_JaffaCakes118
Size

695KB
MD5

fc963d1929299cc8f36ce46ce86c9a8e
SHA1

b50f00f53de6bff81badbd02f05f1bb7a6b80dca
SHA256

9d74db68cf06a1013742ad74af85651bab2f4834d56688894622067012d9581a
SHA512

714f3e16ace51f8ce5603714ce0a9e3474b84ea0252761dcd8d8b5339738730a0b6d2e48faba130eb8ca1b6d3a571cb03635db543f65e13a7718c8d328a55cab
SSDEEP

12288:iGI4pwbxi+q0PDgY37KPnwpSLZLBiutOjYuUrBiM:9NqbEl0PDgY6wpS/iutOj64M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc963d1929299cc8f36ce46ce86c9a8e_JaffaCakes118

Files

fc963d1929299cc8f36ce46ce86c9a8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

629ad41be39f461e18cbe1ca0a03a465

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
FreeLibrary

user32

GetMessageA
BeginPaint
GetFocus
EndPaint
DispatchMessageA
DefWindowProcA
GetSysColor
SetFocus
ScreenToClient
LoadIconA
ShowWindow
SetWindowTextA
DestroyWindow
CreateWindowExA
GetClientRect

msvcrt

wcschr
_controlfp
__p__commode
_acmdln
memmove
wcslen
_XcptFilter
toupper
_exit
__setusermatherr
__CxxFrameHandler
__getmainargs
rand
__set_app_type

gdi32

CreateFontIndirectA
SetBkMode
SelectObject
GetTextMetricsA
LineTo
SetPixel
GetTextColor
GetTextExtentPoint32A
PatBlt
DeleteObject
CreateCompatibleDC
ExtTextOutA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 673KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ