ff21e88cba63c0fa86015ca8f6774820_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff21e88cba63c0fa86015ca8f6774820_JaffaCakes118
Size

146KB
MD5

ff21e88cba63c0fa86015ca8f6774820
SHA1

55f257b7f98be5011f896b4b29f02d32c4e1b94f
SHA256

42d513b0f2f5810422aa89abbba4d3e54959dcf1b1e5b91dcd0b2a87ebe179a7
SHA512

f8a50f845316e96f9fcbb6a9fcb3b3461f24ebf4d7e84be48e4e89591f327c22269d2c36e84144813174730f4180bef9d9e7cc9ad63c83fb8c810863f370dd29
SSDEEP

3072:GfF3v9fCnhlOqUDCOdCX++XMNR9ykECc2stF11+vzw:0dv9qnzOqFOdGxIR9yqWtF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff21e88cba63c0fa86015ca8f6774820_JaffaCakes118

Files

ff21e88cba63c0fa86015ca8f6774820_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3253fe9807b092d234fdfd09b7944cf9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
sprintf
calloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
rand
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_snprintf
??2@YAPAXI@Z
memcpy
malloc
free
__setusermatherr
??3@YAXPAX@Z

kernel32

CreateThread
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ