fd3f1045fb8bd594d7c32b9da27bfe7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd3f1045fb8bd594d7c32b9da27bfe7f_JaffaCakes118
Size

44KB
MD5

fd3f1045fb8bd594d7c32b9da27bfe7f
SHA1

032364d4807125e9aecf91cf9f10f24b671d117f
SHA256

9a43a12c30e69bf3347a8855e20e6cacfa560f9a80fc7b968e45b32bef41e122
SHA512

fdc51d70fa1fcda2edbc8234ceb72397db6ff2f3395cb3409b939f89bd0e91a1468922a5b08f2ee73446c8ef9a8daf00a08daa1dbece8432eae00c4335bd2d52
SSDEEP

768:ydgn2L/jkDn+SNuyLVrb/GZpYLVokAZHZCvYDnHZ/muy6rkT:CY5Bb/GvUykAZov61T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd3f1045fb8bd594d7c32b9da27bfe7f_JaffaCakes118

Files

fd3f1045fb8bd594d7c32b9da27bfe7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ed3fcad6d0e50f4f8bb96fc778e194f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
FlushViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
Sleep
DeleteFileA
TerminateProcess
OpenProcess
WinExec
GetCurrentProcessId
CopyFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetModuleFileNameA

shlwapi

PathFileExistsA

msvcrt

__p___initenv
__dllonexit
time
_mbsupr
sprintf
_ltoa
atoi
_mbsrchr
_except_handler3
_exit
_XcptFilter
exit
_onexit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ