fc2d68a28bcefa032987a0da1b086fe4_JaffaCakes118 | Triage

Sharing

General

Target

fc2d68a28bcefa032987a0da1b086fe4_JaffaCakes118
Size

261KB
MD5

fc2d68a28bcefa032987a0da1b086fe4
SHA1

fbd0c2b9bebc606e3dcbaf18f800ed625e1ad3af
SHA256

96bc1e56654b77002e9d084bc9866124dac3122adb82d9e1b0251fba873644ce
SHA512

49465b496c495a58540e0a91592698d96f060c5b81654bff99f49f8a79be512b3e2c63f2598d491f11b0f644842f719c1b81b8853eb09aff6aaeb7b4c5a0754c
SSDEEP

192:WyHQKTRzbW40kjWcxW9FXxr9Y5zTCJFSvjd4:tQwbW4hWcxW9Rx5Y5fHvjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2d68a28bcefa032987a0da1b086fe4_JaffaCakes118

Files

fc2d68a28bcefa032987a0da1b086fe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6522ae379c026c7198bd0ed402a28fb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindFirstFileA
GetModuleHandleA
RemoveDirectoryA
FindNextFileA
DeleteFileA
GetStartupInfoA
FindClose

user32

wsprintfA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

msvcrt

strcat
free
malloc
exit
strlen
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_stricmp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

owow(
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE