fc0fdcb6e3f87dddd8306d0c40dfa8d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc0fdcb6e3f87dddd8306d0c40dfa8d3_JaffaCakes118
Size

30KB
MD5

fc0fdcb6e3f87dddd8306d0c40dfa8d3
SHA1

a39e56f26c475b9ef4f83a538e37a9f3c7ae95fd
SHA256

bb365588a87c18c5ee0212c30c4924085c3205de388b38bec6b69ec649acac3f
SHA512

e8845ca36b30dacea616af7e1aafc7aacf3a9c1b0320cb13aae8b5814f71cf4b94fd667ee39c07dba432a0725724261cce3ebb751051892d23fd5a0963df40f1
SSDEEP

768:8caIKAG9FfIlZVl9cceyYmX7Z1sjCUxP2:6PV9FwfaceyYmLZmJB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc0fdcb6e3f87dddd8306d0c40dfa8d3_JaffaCakes118

Files

fc0fdcb6e3f87dddd8306d0c40dfa8d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f168f0f161edd67fb83bfc63880e13c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
GetEnvironmentVariableW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE