fcc13f142a4e0895fd32c8d09c2371c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcc13f142a4e0895fd32c8d09c2371c6_JaffaCakes118
Size

36KB
MD5

fcc13f142a4e0895fd32c8d09c2371c6
SHA1

baf6ac704f1b416579cd871422c74f063d97256d
SHA256

bd568f610964405294dc7266c2f6cd9a32ca932b599c55d783d168e703841368
SHA512

49cc6affe8e36f05d71960d6a835098e546d244dfd91a12c4c7e55102d6ffc537dffed0755e82365f5948903929a0f902642e3499505b49fe34f59bf757d6d97
SSDEEP

384:cHP1qaBKxCd7PpLjzKb29lKDYyKsez8/tB:cHPdBKYXx48zso8/tB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc13f142a4e0895fd32c8d09c2371c6_JaffaCakes118

Files

fcc13f142a4e0895fd32c8d09c2371c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92325b10973e6df5b26696b7ef54ae1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
GetVersionExA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE