fad64521b7948054262609855e6c8650_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fad64521b7948054262609855e6c8650_JaffaCakes118
Size

172KB
MD5

fad64521b7948054262609855e6c8650
SHA1

d4c061a8684201489d0a1d27db4569592e4cdbed
SHA256

14217a2ff2c625859454ccbf6f36972fff1dd47f26dbaa99aa04ba88d8b8bd34
SHA512

470ae88a0148d935c420db2143904dc4ccdf88034b922f8d821ffd4a8dff33c917c50f4fb502c1ec0473c796c6c734d0643f2171fa60b1fc5dbb2bb2633e9300
SSDEEP

3072:nuDoKmCfp8L+HUnvzCK5UNGDkQwdyaZj1eiPUAsiPgWFH6npKkL895m8mbliAGkG:nSaeS+HUneKiokQwjZjEiPtWH895mfwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad64521b7948054262609855e6c8650_JaffaCakes118

Files

fad64521b7948054262609855e6c8650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19ecdc43ff6e318825bc9084a6bd7313

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
CreateMutexA
GetModuleHandleA
WriteConsoleW

msvcrt

exit
fclose
fwrite
fputs
fopen
free
realloc
malloc
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ