fd0af6f4055c810503864b3557a38e84_JaffaCakes118 | Triage

Sharing

General

Target

fd0af6f4055c810503864b3557a38e84_JaffaCakes118
Size

133KB
MD5

fd0af6f4055c810503864b3557a38e84
SHA1

c97a8b31810ab816ef3f11fe09a9e048e019e672
SHA256

7a72d2ad0695180ab76a795e5297f34d8ee767a0ab05de700712c3063458628b
SHA512

dadaeccbcec493d40817195369e310679d36c276ca40ce1d44895549ff6ca3c719b2d26a0984dedaaca8541a05e3d93e022c9ae13be32f96f993942d72299711
SSDEEP

3072:NPVIAlnOyUhnhUABYvg5Tmv5aijpzFmM96qajCeI0IbwBbCpVJc6BF:NtIAchhUNvg5TmRaUJmM96yes01+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd0af6f4055c810503864b3557a38e84_JaffaCakes118

Files

fd0af6f4055c810503864b3557a38e84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8630289b145ad51a9b8a7cd0702af0fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

BeginUpdateResourceA
GetLogicalDriveStringsA
IsBadReadPtr
VirtualFreeEx
SetTapePosition
SetComputerNameA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ