fdbb3f64ebe6b32dd0b16092536d51c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdbb3f64ebe6b32dd0b16092536d51c6_JaffaCakes118
Size

64KB
MD5

fdbb3f64ebe6b32dd0b16092536d51c6
SHA1

7b229dcfcc8402cb816b9472b825c6d85ab83c76
SHA256

4bbb61a0843fb96c9a4331508e93bd42140dfa312232aa33e3576176ec0d0f41
SHA512

4bdd27fba4762177765d4782661b66ea91a78ae03efeb014ffcad9dbe45f677e03ebef152fdec87ee93505616d14eecb7f69c2c508724196928ea2276b89404e
SSDEEP

1536:zEHWLkL2QgrKa7lCJXAl3OWxDXVB9feGyysVnxp4ega2g:IHGkL2QhylEQlfDXVxwga2g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdbb3f64ebe6b32dd0b16092536d51c6_JaffaCakes118

Files

fdbb3f64ebe6b32dd0b16092536d51c6_JaffaCakes118
.exe windows:6 windows x86 arch:x86

20c171d16b22ace4957e0c782f96c141

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

comctl32

PropertySheetA

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-stdio-l1-1-0

_open

api-ms-win-crt-environment-l1-1-0

_putenv

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-convert-l1-1-0

atol

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32

user32

GetDC

gdi32

TextOutA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CoInitialize

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.MPRESS1
Size: 59KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE