fc94174682516f6ea02583533e750303_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc94174682516f6ea02583533e750303_JaffaCakes118
Size

275KB
MD5

fc94174682516f6ea02583533e750303
SHA1

a34930ad0a3e104a2f7eb9e7c2262a0c1a64d093
SHA256

9f2de10b77cd2791d9c7bf1131e42f42d778d832fe8cdac8698c9606e2705b75
SHA512

d5e40121323014974ab73c96a499ca306452fe9b028d4e93f9d4a8ac5f34fb317f52f44c1ce6387f05b4b01c2d535ed06b80f5ec930fd28410e26af5003f2eda
SSDEEP

3072:8VYKZ6WHtfZTwwF07Js8ojV3Pd6Tqni72cctwuxHC81rR0ricM2wSIJ89Gq53:8VYKv52wEjoBfE14xV13l5MGq53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc94174682516f6ea02583533e750303_JaffaCakes118

Files

fc94174682516f6ea02583533e750303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

863f1a2b1dcf8f494298cfec180e34a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDoubleClickTime

shlwapi

StrStrA

kernel32

GetProcAddress
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetVersion
LoadLibraryA
LoadResource
LockResource

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE