fa4dd1995e06562d5f9fb1576b70b956_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4dd1995e06562d5f9fb1576b70b956_JaffaCakes118
Size

86KB
MD5

fa4dd1995e06562d5f9fb1576b70b956
SHA1

4c88aaf5e9635a255689e7bbddc37a178206ef9e
SHA256

786d47d2291e0e71f132ac5edeeeadc509b9a2f46d725d728e006b3ac5aa15c3
SHA512

00e41aa39dfecc1f82623dd0a831fde3a805f15425111ae749c8d4b891ab5277c3654e844f1e24c70ab114622d1ebe83a1df5525196ae3aee473343e98049e04
SSDEEP

1536:4lBXsF41oRZj4e5lS5lMv7KyAmztWTcJveahxPpM3tKfG/Gd4BMNOg1n:MJsi6Hh5I4vuFr/aLm3wfHd4mD1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4dd1995e06562d5f9fb1576b70b956_JaffaCakes118

Files

fa4dd1995e06562d5f9fb1576b70b956_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91b9ee1e10403a37844cf13ee7214860

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetModuleFileNameA
GetTickCount
FindClose
FindFirstFileA
FindNextFileA
lstrcpynA
DeleteFileA
GetTempFileNameA
lstrcatA
lstrcpyA
MoveFileA
SetFileTime
CloseHandle
WriteFile
CreateFileA
GetTempPathA
CreateProcessA
LoadLibraryA
GetSystemDirectoryA
ExitProcess
Sleep
RtlUnwind

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 81KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE