fcab3c85983570e64613a0a5bf46ebd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcab3c85983570e64613a0a5bf46ebd8_JaffaCakes118
Size

32KB
MD5

fcab3c85983570e64613a0a5bf46ebd8
SHA1

a3700a7f24f145bdc87fb00ca6e95314167f438a
SHA256

42a5a73f3b986c5a47ad16f439e9b9269f330cda699b7f8a696ac1029bddbbde
SHA512

7f5282f7f9fd9f66fc0d921e07b03ae37bfe4806d0accff708b5be7bf70ed9418e73dfc3f4c2a41867f3361712855efbb926061c62c29a57e4ddac5af6ec16d6
SSDEEP

384:6NFTTOSmaIaBKWHkp9bsomllWySrbEb5g4tklb:ITO+IopHya8Zbq5Xt+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcab3c85983570e64613a0a5bf46ebd8_JaffaCakes118

Files

fcab3c85983570e64613a0a5bf46ebd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0413d980d17b31df74830cda61385e7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
CloseHandle

ws2_32

WSAStartup
socket
htons
send
recv
closesocket
WSACleanup
inet_addr
gethostbyname

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE