fb40726d7fd8318ee4c84bf0e1acc3ea_JaffaCakes118 | Triage

Sharing

General

Target

fb40726d7fd8318ee4c84bf0e1acc3ea_JaffaCakes118
Size

164KB
MD5

fb40726d7fd8318ee4c84bf0e1acc3ea
SHA1

66868a47a23b8f9c47d201d0ad947da188a4a5d1
SHA256

beefa4275b3f60d6e085e1e9fe698e5c09f171374dcf09f7ec0a33aa256ffd3d
SHA512

20d6ac185eb04b573c16b22e0a614d087b4595c4dd40657d0a065ca91581ca97a986d647cb00cc2742a63aa27d0b5be07d105f55256b5e1919ce207fcd691cf4
SSDEEP

3072:fJfrOsX6d5/hadTRl6ZghWyZokJZ1dTzcTWyQU4:1qKahadTPOspJZvr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb40726d7fd8318ee4c84bf0e1acc3ea_JaffaCakes118

Files

fb40726d7fd8318ee4c84bf0e1acc3ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a6e79e7bc8d04c7f581fbe0a17dbb5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
strcpy
malloc
strlen
memset
srand
time
atol
printf
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE