fb7c0da01a511fc42deaaeac3481c60e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb7c0da01a511fc42deaaeac3481c60e_JaffaCakes118
Size

172KB
MD5

fb7c0da01a511fc42deaaeac3481c60e
SHA1

0e8c9520bb78403f632cb735a28988c4a5a9eb01
SHA256

f6c2986f0852d9f77a5ed417f8b41cb255dfc88f925f01b09f8ee0102762c7d4
SHA512

a85ef9886319409dc7292d172e24cb2a0b53b0218f1e4739583a2de0b2119fb51d9d9c7091cf799ec2a3d6815a39625d3dafad0387e3eea07cc52d76d6e1feb7
SSDEEP

3072:6IQrgXpf+dL27Vk5j0439EHHbPuNfNF6cGw20weH+otmMDXryGv:XVpW527V5QEnbEHGwWMDX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7c0da01a511fc42deaaeac3481c60e_JaffaCakes118

Files

fb7c0da01a511fc42deaaeac3481c60e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25bc5a9b7aa44c75000c21e6e8983bcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

Toolhelp32ReadProcessMemory
GetModuleFileNameA
GetShortPathNameA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ