fc68560dd16013140b77d01f9e0d9cd6_JaffaCakes118 | Triage

Sharing

General

Target

fc68560dd16013140b77d01f9e0d9cd6_JaffaCakes118
Size

29KB
MD5

fc68560dd16013140b77d01f9e0d9cd6
SHA1

e53443db44b68570caccf4f887333f02d5fc4e7c
SHA256

5aa53b070c2de1b2ad8ffe1f1e6e2e1b943503f56b3ede48b6711f7f96f8ea3f
SHA512

7df4c5ab730ca6131ee5a4373845928454243682fafa9e06a326703d6565fce702f8ffc52d96ca7436376fbaa303241ca0f23e6d251fd46a53db2aee2e7afbb2
SSDEEP

768:Sv5clp5+9KmhWT3Kf3pAj5Rf2kl1uJscc3MWr+xgx665ec+Vlac6bdgfLsXzr5Nl:Sd8DVL0QEbnaCsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc68560dd16013140b77d01f9e0d9cd6_JaffaCakes118

Files

fc68560dd16013140b77d01f9e0d9cd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

480f49d6a2cd9e4ba4ecabe8f0f0d5a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

memcpy
__CxxFrameHandler
??_V@YAXPAX@Z
strchr
strstr
srand
exit
_snprintf
strtok
strncpy
atoi
__dllonexit
_onexit
_c_exit
strcat
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??1type_info@@UAE@XZ
_CxxThrowException
sprintf
rand
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
strcpy
_vsnprintf
strlen
_exit
_except_handler3
?terminate@@YAXXZ

oleaut32

VariantInit
SysAllocString
VariantClear

kernel32

ExpandEnvironmentStringsA
GetProcAddress
FreeLibrary
Sleep
GetTickCount
LoadLibraryA
GetStartupInfoA
LocalFree
GetModuleHandleA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE