fa4cd5be23f37f0c971286611f415c06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4cd5be23f37f0c971286611f415c06_JaffaCakes118
Size

178KB
MD5

fa4cd5be23f37f0c971286611f415c06
SHA1

4c0ebb8b9452e43b9ce7206b31bb4105891feffa
SHA256

005bf8fb110e5d8b82dc3fa1b739411a0abce2b459f6f5cc63c479f036c19c55
SHA512

5670a353b2a474516a954d07e7107e52f5808ec9a4ed7c226d55d3ac02e64260874496c72b833d8cfef57cbf3fbb256bfdd08e8ada693a4ff981d27b16b600ba
SSDEEP

3072:df85uXLjf9RLW/1kvapBJfv8I3F8drGCGtlLHEO/tHfkiknmbD4/sEdD:df8kbjPw19Jfv8cid0t6O/t/kiTbD4kQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4cd5be23f37f0c971286611f415c06_JaffaCakes118

Files

fa4cd5be23f37f0c971286611f415c06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9b7ad7d87f3f1f12cf3d238058c5c9ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Lost Folder Info\ProjFileNameData

Imports

kernel32

GetThreadLocale
CreateFileA
_lopen
LoadLibraryW
AddAtomA
IsDBCSLeadByte
LCMapStringA
SetCurrentDirectoryA
GetModuleHandleW
GetCommandLineA
OpenFile
GlobalCompact
lstrcmpiW

psapi

QueryWorkingSet

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

IsCharAlphaA

Exports

Exports

_SwapMouseButtonSwapMouseButton@0

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ