fcd328d03aae66da2ec7c3ad43bdaafb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcd328d03aae66da2ec7c3ad43bdaafb_JaffaCakes118
Size

8KB
MD5

fcd328d03aae66da2ec7c3ad43bdaafb
SHA1

f75bde446fa60dd0bf09b6afa5bf702f96f6d2c7
SHA256

285675fda031ea5f4f3d48253b143e70ee4cfb2cffc8306b02b6828162fdd85a
SHA512

fab5268ee736f68d65c2a318f57cc4941a41e394a21d9a3ff4e25c35f67c802b6ba33e87c64ba1a59b47590c23085f0ba214d4245e8be43f4ddbb5065ee0f3db
SSDEEP

192:39LFaxiiqspgYfXi813EyPW4FcalVFOQCe:39LFa4iXZ5PzjdOQCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcd328d03aae66da2ec7c3ad43bdaafb_JaffaCakes118

Files

fcd328d03aae66da2ec7c3ad43bdaafb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d97c0d04ae9e0eb920ed41620eca29d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitVDM
FindFirstFileA
GetACP
GetCommModemStatus
GetConsoleMode

gdi32

DeleteObject
DescribePixelFormat
EnumEnhMetaFile
ExtFloodFill

shell32

ExtractIconA
ILSaveToStream
OpenRegStream
PifMgr_CloseProperties

msvcrt

__CxxFrameHandler
___mb_cur_max_func
__crtCompareStringA
_EH_prolog
__doserrno
__iscsym

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE