fc8d923a19282c71fe8df54bded25e7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc8d923a19282c71fe8df54bded25e7c_JaffaCakes118
Size

44KB
MD5

fc8d923a19282c71fe8df54bded25e7c
SHA1

46df2262710be32d065da61ba603e9734afab5c9
SHA256

174ae2b8f815dabcc8c66af3d7566d8c98ac0e6c6312f52059f013cf0c65b657
SHA512

9e0f7ca8169c79c2163e692daf349e25547e0b6c5871b43b626746b70c934c35ec5b483f6bfe5be0a0fa65b37de4b6947913b2149828f60980950cbb3826e7ab
SSDEEP

768:v4h7HdBfpNmp/sPWwtlJ1wj62YFGPfcY5HPO0B:vOdBmpWWw92W2XPfcY5HPO0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc8d923a19282c71fe8df54bded25e7c_JaffaCakes118

Files

fc8d923a19282c71fe8df54bded25e7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3de0540ead9eb08c020446a595d6e4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
fopen
fseek
fread
memcpy
_except_handler3
fclose

kernel32

GetModuleHandleA
ExitProcess
VirtualFree
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
VirtualAlloc
VirtualProtect
GetModuleFileNameA
Sleep
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ