fb650839f37bf5a9b3ab7e3e379303d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb650839f37bf5a9b3ab7e3e379303d8_JaffaCakes118
Size

44KB
MD5

fb650839f37bf5a9b3ab7e3e379303d8
SHA1

2e87940d0ee1253be5ebb69e17dead9371c78d81
SHA256

f326fc75fb8221ee07d6574f8f86e64367182f0190308c0a6bf04a07e5d66b8d
SHA512

a3797cfc6c5b785794c52c1295293943a48e3d3a4ed356fa53bb2280a36a620af707b8fd6863e3b391f488860957e7eeba5239ac74f35b76db5351c545c166d1
SSDEEP

768:pPT/9S2XMCoyeRnsn6rF+Xh5qE8njH4lzcxQX2oooDkhAy8g7A3b80IUUiM95Zs:RkOM+ck6J+a4BcxQX2oooD+AyxArLIVU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb650839f37bf5a9b3ab7e3e379303d8_JaffaCakes118

Files

fb650839f37bf5a9b3ab7e3e379303d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43649eaf61ced708400960ed122f8050

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
MessageBoxW

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleHandleA

msvcrt

__getmainargs

Sections

.text
Size: 44KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE