fcf8a48ad7f4cc7add282ea0d57d0b42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf8a48ad7f4cc7add282ea0d57d0b42_JaffaCakes118
Size

2KB
MD5

fcf8a48ad7f4cc7add282ea0d57d0b42
SHA1

fa898861ff2d6ff421ba2f809e692478d3ba7da8
SHA256

9c3c2dc062f5fa5cde4c7a6e0a0b03f00a5a8a0ec802d03a414f21704696b95c
SHA512

91d0101f371762b3e14e365434dc533ffd114009f17b734199fc57b15cf66953eb713ef7d7f70426b352c4080af8b008c6b0ca6a2694729a219f046629cf143b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf8a48ad7f4cc7add282ea0d57d0b42_JaffaCakes118

Files

fcf8a48ad7f4cc7add282ea0d57d0b42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

266c108420d2e301ad390987485644ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep

msvcrt

printf
sprintf
rand
srand
time
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

ws2_32

WSACleanup
WSAStartup
closesocket
send
connect
socket
htons
gethostbyname
inet_addr

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE