fff8871164a3ef5b1f62ae56c4450439_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fff8871164a3ef5b1f62ae56c4450439_JaffaCakes118
Size

31KB
MD5

fff8871164a3ef5b1f62ae56c4450439
SHA1

663e3c356d16e3baad9b668e2db6ce15c513f22e
SHA256

f70cda64eaa1db658787faa0de499ec8d34be9f3927e431264000de01c2f5dfc
SHA512

1fe4590446f0744fa31a752c02b6adfe9c70f25c66aa87c397db95040cd7ad58e472b6c8b97c313694f43ea8b312efd063aa4bbbe14226a0ebdc912ee4b47f30
SSDEEP

768:cX+1C90QNkuLq7o18yVEJECRNjpZyF5Jxv/nvPWOFArn8:cXjnk2qK8yVEJTbNZexv/vPdE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff8871164a3ef5b1f62ae56c4450439_JaffaCakes118

Files

fff8871164a3ef5b1f62ae56c4450439_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49ebe2e6c903cad997c731ca35e23b55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
InterlockedIncrement
GetDateFormatA
GetThreadContext
GetUserDefaultLCID
GetEnvironmentStringsW
lstrcmpiA
GetConsoleCP
lstrlenW
GetACP
GetProcessHeap
GlobalMemoryStatus
GlobalReAlloc
VirtualQueryEx
FatalAppExitA
WriteConsoleA
WideCharToMultiByte
HeapDestroy
SetConsoleCtrlHandler
GetStartupInfoA
OpenProcess
EnterCriticalSection
LocalAlloc
EnumSystemLocalesA

msvcrt

strstr
_itow
_onexit
_snwprintf
_wtoi
fclose

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ