fc0b8d98a64c619d3b88a0a58489a1af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc0b8d98a64c619d3b88a0a58489a1af_JaffaCakes118
Size

19KB
MD5

fc0b8d98a64c619d3b88a0a58489a1af
SHA1

7b7fa4f109021aee0be2d9eb503ef0e1df3128bc
SHA256

9aaf5018a175a47b84bb54a6e2210da63bd07ba43c2687b5baa37ac2ea817393
SHA512

e719ed7a327f17cef0e6210664b6b7ce67eed6c61c5aad6e07f092722bcf91eaf09d7218c2790c1bcd2ac414d56d10d99eaccedfb80c55d42d8a8198b3b6dfe7
SSDEEP

384:5Op4Qc0jg4dw46PtUzQAwnk9s0yRW7X6Oqdh:opPPdOP6sAckO3c7qj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc0b8d98a64c619d3b88a0a58489a1af_JaffaCakes118

Files

fc0b8d98a64c619d3b88a0a58489a1af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fd546f7910260c1c5a19b67d983ffd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetVersionExA
GetCommandLineA
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WinExec
WriteFile
FindResourceA
ExitProcess
CreateFileA
GlobalAlloc
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ