fcc165cc8486f520735036749247347a_JaffaCakes118 | Triage

Sharing

General

Target

fcc165cc8486f520735036749247347a_JaffaCakes118
Size

132KB
MD5

fcc165cc8486f520735036749247347a
SHA1

d2dee39dfa9e0b3c2ba6d9765d15f02d9708c454
SHA256

fc5499f9f9c4cd88af47e503db6acf4e7d6bd4f0bcf4e2dce1e9c395e3a84878
SHA512

30b74afb2073b75ef949e9bbe7749f1294499769b55da37b3e9ce78c024ec56817fb444cd086ab52fa60f3dc9b326c9cd97d97096eb4a11bd7f2efa686609e7c
SSDEEP

3072:8wyY4UqK3sx05cZ6g3BfQQ7cZuXlhEPG25QU/:5RyK3/5UpfQmflhEPG2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc165cc8486f520735036749247347a_JaffaCakes118

Files

fcc165cc8486f520735036749247347a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

725e8c708a6e85d53033b49417f5a65d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
gethostbyname
socket
bind
connect
shutdown
closesocket
WSACleanup

kernel32

LoadLibraryA
GetStartupInfoA
GetSystemDirectoryA
GetTempPathA
FindResourceA
SizeofResource
LoadResource
LockResource
GetModuleHandleA
GetProcAddress
GetCurrentProcess

msvcrt

__set_app_type
_except_handler3
_controlfp
time
__p__fmode
free
malloc
_strlwr
sprintf
fclose
fwrite
fopen
fprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ