fdc0d4c58978e14ddc2d271efa4a6cf3_JaffaCakes118 | Triage

Sharing

General

Target

fdc0d4c58978e14ddc2d271efa4a6cf3_JaffaCakes118
Size

189KB
MD5

fdc0d4c58978e14ddc2d271efa4a6cf3
SHA1

bfd610bfe9b780132eca6f0e35db20dbad2cfb13
SHA256

9bf69d7e82b52d77284b7581b5c01f454f2148df6fa13e7cb1e738a3424cebec
SHA512

5702fa68df775a7fe08adf759a0a8025886dd94191d5e55cdc650733acc88675601ca072de8b14ce81efeb177c128657dbf1c8874f90506d3eb757c45941b209
SSDEEP

3072:cGGFOyZjhZt6ePQT0FN0cyVlIjBS/0n0tTg4U0B/QO6GpUbdBDnB2+JHg+MgITvR:rGvZtrYTeNFyVwS/0n0t0p0NpoBDBp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc0d4c58978e14ddc2d271efa4a6cf3_JaffaCakes118

Files

fdc0d4c58978e14ddc2d271efa4a6cf3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

89641684c099e026c6a1de144361bd0e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Hello\Insert\Data\File.exe

Imports

msvcrt

iswspace
strspn
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
localtime
_XcptFilter
_exit
_cexit
isupper
__setusermatherr
__getmainargs
strncpy

gdi32

SetWindowOrgEx
SetBitmapBits
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
DeleteObject
CreateDiscardableBitmap

kernel32

OpenFileMappingA
GetSystemDefaultLangID
FindClose
SetFilePointer
CreateFileA
GetCommState
ClearCommBreak
OpenFileMappingW
ExitThread
SetSystemTime
GetPriorityClass

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ