fcac76d200170fc419ef7d3b3a1de32f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcac76d200170fc419ef7d3b3a1de32f_JaffaCakes118
Size

185KB
MD5

fcac76d200170fc419ef7d3b3a1de32f
SHA1

1895b431621a9c90814aac573daaec2abc927c5b
SHA256

03acebce8983f4731ae821c9f467bba77ed41fb99106cf4a575b750c89c436d6
SHA512

d6480dc0a7df4f32ebc07acc946da7afb5c8bc45ebd67269557b1c7037d32e588b8519a9bf7955dc85b01eddbec05cc8cd8766dc5a6f504e26d01f93a5bf3475
SSDEEP

3072:k2c/B/fenM88rUB/ztii70JN+WYl3UA1Qf/YVMrpo9UltX9s4ht:k5/B/rPrY/ztJNjl31g/YVMdEotX9nX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcac76d200170fc419ef7d3b3a1de32f_JaffaCakes118

Files

fcac76d200170fc419ef7d3b3a1de32f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db8736a2fcf95fcdd6af750f68c83d86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_close
_open
sprintf
strncpy
_write
_read
??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
_exit
_lseek
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
time
srand
rand
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ