fbd5d0aeb5c99d627b5fd234a3c1bb6a_JaffaCakes118 | Triage

Sharing

General

Target

fbd5d0aeb5c99d627b5fd234a3c1bb6a_JaffaCakes118
Size

356KB
MD5

fbd5d0aeb5c99d627b5fd234a3c1bb6a
SHA1

931e0a22dea700ab2ebfd22cd5386ccb047d5f24
SHA256

d8c09e328bee42dac7172225f165e008f21888304ad4e8be7900b8f205be3e77
SHA512

7288d674151095a18f2033024266c6a698f9d8bcc08c30605ef52413e2e48df0af7e995e636b944d34842b68ee89e65163acd1c35a2426ac927e86986739120e
SSDEEP

6144:dGPy6MqYL2w664ADU+9PTLG/nLmEFLpexQyKrvQbBXHf4DSnuoTTRaz:Ia6M9L2w6ODUCPTa/nLT/oKrvWXHfVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd5d0aeb5c99d627b5fd234a3c1bb6a_JaffaCakes118

Files

fbd5d0aeb5c99d627b5fd234a3c1bb6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

567380a34291c6efa10cb52a5d1d6837

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
GetCurrentThreadId
SetTapePosition
VirtualProtect
CloseHandle
GetLastError
CreateMutexA
GetModuleHandleA
GetStartupInfoA

msvcrt

clock
_exit
_XcptFilter
exit
malloc
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
free
_acmdln
_memicmp

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 562KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ