feddc02e2c818ae590a09e9255fd7fbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feddc02e2c818ae590a09e9255fd7fbb_JaffaCakes118
Size

48KB
MD5

feddc02e2c818ae590a09e9255fd7fbb
SHA1

40443e1f461c5928335b8f53c80bae5ade456c34
SHA256

104dfe4c040572e587eb92e4da25f7039b54a2259869ff6f9d425d6c441e5e9e
SHA512

e5bd5ca3660d2aaccc79047a8fda304b06e8866e2c767ee0183a9056d6948c603782c2f9cd609f34da61c254939c6c25d851c0b8b598fe0b1ba81fa694c22f72
SSDEEP

768:EDDJqmnh+1QWxHk33bOxH6RtZhvzhDUnH+yidXo9H3:uqmh+1rO33yIPnvlgnxwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feddc02e2c818ae590a09e9255fd7fbb_JaffaCakes118

Files

feddc02e2c818ae590a09e9255fd7fbb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

076e2ad0c39b6e290ff32dabd3cdf03a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetLastError
GetSystemTimeAsFileTime
CloseHandle
GetStdHandle
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Exports

Exports

acClient

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ