fd3bfd98024bfec0d8fbb6b8513d8cc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd3bfd98024bfec0d8fbb6b8513d8cc0_JaffaCakes118
Size

181KB
MD5

fd3bfd98024bfec0d8fbb6b8513d8cc0
SHA1

0c92f63ab85462f732aa4faf93557389932a8917
SHA256

81f9dfc0267535b121619be36e4b8d3fbb3c60883a3049352ab803a5e330c73d
SHA512

341951c627636ffcd787e4dcdeec67e9de43d2c541529122b4d40407f179c8ebd12cbf82b26bd8c752866e30bcc46cf4f441d2666053fc093979ab2b0f5b3aca
SSDEEP

3072:1va/ol7T45hWtyicprkXF+kWJCgMvtsy9Eq1nnxeyRDO42iIYZ4g2:hawq5hWtyicFQwkQCFsy9Eq1xeSj2yZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd3bfd98024bfec0d8fbb6b8513d8cc0_JaffaCakes118

Files

fd3bfd98024bfec0d8fbb6b8513d8cc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfc2626a07023a8455be518f3844366a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
DeleteFileW
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
WriteConsoleW
CloseHandle
WaitForSingleObject
GetLastError
CreateProcessW
GetModuleHandleA
GetStartupInfoW

msvcr71

malloc
_findclose
_findfirst
wprintf
memset
free
_exit
_XcptFilter
_cexit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
exit
_c_exit

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ