f3cc13cac65ab677e97a9913cc6e4f62_JaffaCakes118 | Triage

Sharing

General

Target

f3cc13cac65ab677e97a9913cc6e4f62_JaffaCakes118
Size

5KB
MD5

f3cc13cac65ab677e97a9913cc6e4f62
SHA1

08599f3be0de8c79928acd6cf314001f55cca2b3
SHA256

7835adff0a485bf2327532c8c3676d5bc2a680bf6234c6043daba3c82b09966e
SHA512

6888dd0f0510dbad4c3bf651c1c898d9699e5bc858833db522f26bee65d312cb0e7bb1b82eb302f9c7f3a356562c317cca71aab4dda08754deb3a50fc731a5e7
SSDEEP

48:Sg4Eo2CDH2mzzNp4SzcpgUpDzVe6daL05QX91WiIZh31HTE2pReglSXYLBUrdc2+:ouCDH1zNp5zcptVEN9M302jKYLuUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3cc13cac65ab677e97a9913cc6e4f62_JaffaCakes118

Files

f3cc13cac65ab677e97a9913cc6e4f62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef0bbd733e35ca75724f3f700c539052

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
OpenEventA
SetFileAttributesW
lstrcatA
GetSystemDirectoryA
CreateEventA
lstrcatW
lstrcpyW
GetCurrentProcessId
WideCharToMultiByte
WaitForSingleObject
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
CompareStringA

user32

wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegOpenKeyExW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE