fcb389912ec75758646e1684995a7bc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcb389912ec75758646e1684995a7bc1_JaffaCakes118
Size

216KB
MD5

fcb389912ec75758646e1684995a7bc1
SHA1

e1e70b959016d0bab42c4e76013b4309aac3b8f5
SHA256

7d57b73cd6f82638e3b5abc8b60abf9f168b41c9fe29e4e0c25a01043fa4fc76
SHA512

d342c8daa5ce5d8730d7ef45b1a62837cfeefd1ee3afcc3ce505e1eb3676ae0ecca772b84e2c583388df18e53f4484a6b593bc64faff67d1242d5e6bd2ec5dc1
SSDEEP

3072:RR9oiVSouMB9ELpd0ob4pigvz95Nt4IXiws/myIp1mrIP/GXYx8EufPwNez90F/A:VNClZ4dx1dX1moXMwmC/gb/srZiD5Hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcb389912ec75758646e1684995a7bc1_JaffaCakes118

Files

fcb389912ec75758646e1684995a7bc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

900484562eac952acb54c01e40db8af1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Kyle\Desktop\TestMeta\2003\Output\Release\bcud6o6wefnwrvb6r.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime

user32

wsprintfA

msvcr71

_except_handler3
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
__security_error_handler
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
??3@YAXPAX@Z
atoi
malloc
free
memset
_amsg_exit

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE