fc48c439093abcc86fd954b44ee51a95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc48c439093abcc86fd954b44ee51a95_JaffaCakes118
Size

83KB
MD5

fc48c439093abcc86fd954b44ee51a95
SHA1

9a9be898cefa8d266909c3d1b65dfc5fb943932c
SHA256

e62894eea53045ba1cc17cdba9e348e7b19751d46b2ddedfdc7112179adcf7ae
SHA512

1aaff104406c32353e1a1bbabbe968e6fc552c5dda6521b0615ce22c34575cb01deed124fb7aa5171e5607610c3b0c5db2cf55d9f65df6e4f151aa97706e8d0a
SSDEEP

1536:NmmmgOJwVqYAKtIQgxVPjgEiU4v4T1dvoGsiCvVgjEErxTWDTMqhGKYIZTET8bDQ:NmmmxJABNSPP2rQZdvoGfPjBkMqhGKZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc48c439093abcc86fd954b44ee51a95_JaffaCakes118

Files

fc48c439093abcc86fd954b44ee51a95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a23ddafc26a520352327ca595508c372

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
SetStdHandle
SetSystemPowerState
GetProcessId
WriteProfileStringA
AddAtomW
GetThreadTimes
GetProfileIntA
SwitchToFiber
RaiseException
GlobalUnWire
LoadLibraryW
CreateMutexW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE