fd47f7fac3ec650eae715795086bc6d7_JaffaCakes118 | Triage

Sharing

General

Target

fd47f7fac3ec650eae715795086bc6d7_JaffaCakes118
Size

121KB
MD5

fd47f7fac3ec650eae715795086bc6d7
SHA1

33817ba286395cec76a64f24ee3d6392ac448591
SHA256

289b9b7e2bd6678218e33d77c6464d2c5c5807f99d6e7e4037ba87b98530e274
SHA512

2074b6cbf166bd1999917d895a7c7f24ac339e02790d922bc028a5ac1fe49a155aed6c78a469914403be3211c950ec3c926d6f248b9787ee00c9dc36a4df7fad
SSDEEP

768:fjXEU8CPfbgDI2yDv5iKakaRLpWvry0j4zLRahqPLpnfFSdxwhl:jeDgkKapRI8Ex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fd47f7fac3ec650eae715795086bc6d7_JaffaCakes118

Files

fd47f7fac3ec650eae715795086bc6d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee33a77fa339d045ffbd39f442efd3ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
TlsGetValue
GetModuleHandleA
SetEnvironmentVariableA

user32

LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
GetMapMode
SetWorldTransform
CombineTransform

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE