fb1f4f7dfd1259228947c4f1a3f698dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1f4f7dfd1259228947c4f1a3f698dc_JaffaCakes118
Size

4KB
MD5

fb1f4f7dfd1259228947c4f1a3f698dc
SHA1

073297b6d9e8884d0156bd92614e2d5e4e4b1fc3
SHA256

b243bb1ed3d73936c843850ca6b377324cb514759b8c5d173b6d0f0d942c3ea6
SHA512

c1c5bf8788a7bea2b0ad761083b6dd2b35c1edf525f3fb06999312faeaed0809d76e21877090d1b66d887ae568e13d09160609b5d3d662b49c2cb87125c6c9c1
SSDEEP

48:yQCnyjHL0VpjX0DYdP1+HL0VpjX0DYdPcv+XBxYulw+LURaKP+1/8+Es1y/r:inU5DYdPg5DYdPcWjLPLUHPNrsir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1f4f7dfd1259228947c4f1a3f698dc_JaffaCakes118

Files

fb1f4f7dfd1259228947c4f1a3f698dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

758c803354bd9b286213c44b4f199265

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
lstrcmpiA
ExitProcess
GetLocalTime
lstrcpyA
GetSystemDirectoryA
GetModuleFileNameA
GetLastError
CreateMutexA
lstrcatA
Sleep
lstrlenA

user32

MessageBoxW
wsprintfA

advapi32

RegOpenKeyExA
RegSetValueExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCryptor
Size: 46B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ