fc9f6cf54de9c799b00c318a6a44c4b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc9f6cf54de9c799b00c318a6a44c4b0_JaffaCakes118
Size

48KB
MD5

fc9f6cf54de9c799b00c318a6a44c4b0
SHA1

2d4759d48199ff909282a25702830b61c1b5a0e1
SHA256

99c3a88327764c85235063475c2642ad07633afe7533b0aae2cd45cb43a61263
SHA512

f53dc782d0fa175e207530b76e14a173cf318dfc3b37d2eb48009c605773c6150ce0a309f316b659ff046972d654b1c6df820917676b067930c57e2b895fc483
SSDEEP

768:/SS1NQZz8P+PiB9wZ3lopxolVo8lI7ex:/SS1udn3hlO7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc9f6cf54de9c799b00c318a6a44c4b0_JaffaCakes118

Files

fc9f6cf54de9c799b00c318a6a44c4b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc9f430d79e911b1c8eb29b5153e8d54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetProcAddress
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE