fc65999fcd17c37f246ef1767f70fc04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc65999fcd17c37f246ef1767f70fc04_JaffaCakes118
Size

61KB
MD5

fc65999fcd17c37f246ef1767f70fc04
SHA1

09cf4135a580d8ec160d999bc5be6e9744044106
SHA256

149fe5d7e212d4f1201d9b9c7a8235b4cfeb2f3813d84b6e04b1f5edbb83a1b6
SHA512

cf5993098ab96de8ce6b6b2fd76e48c8dd57f27567645ddf65d28d31d00b0e1e92357b195c74b12c0bcf499b6bbdc274fcb2bdb2248ff2804a4fa4f2e5283503
SSDEEP

1536:ELicrmyDVK2H0kAV2b4cYN/6isLgLfPJYjV:mrmy7cX1SikgjP0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc65999fcd17c37f246ef1767f70fc04_JaffaCakes118

Files

fc65999fcd17c37f246ef1767f70fc04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4db6d1a53d7da1b29de142dfa01a13e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreateTagsW
FindActCtxSectionGuid
WriteFileEx
WaitForMultipleObjects
_lclose
EnumSystemCodePagesA
GetConsoleTitleW
SetThreadExecutionState
EnumResourceLanguagesA
lstrcatW
GetFileAttributesExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE