fcc0a22e665cbba23d428e25cfebf64c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcc0a22e665cbba23d428e25cfebf64c_JaffaCakes118
Size

1.2MB
MD5

fcc0a22e665cbba23d428e25cfebf64c
SHA1

006a39f4b54ab9ca0d915a1f3472f934feb82b4a
SHA256

53dbd90e54ee34775b0190ee6e3dc9e89561a7190b869d430d24edf85c331788
SHA512

b1188516d81fd954fef0d4e92177cd54d738dd0472bbe2d7ab0919c480c867add97143182ed056aa90451c8b5fa92512e0c4d1a7782567ff368105ad2791e79c
SSDEEP

24576:TrYyUv/M456Oj6KWecXS6A0oC1A4m6V6g9:4yUMieKWeYS6/ooAq6g9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc0a22e665cbba23d428e25cfebf64c_JaffaCakes118

Files

fcc0a22e665cbba23d428e25cfebf64c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 648KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ