0f549fefe23b89857e49113c174f9ef7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f549fefe23b89857e49113c174f9ef7_JaffaCakes118
Size

12KB
MD5

0f549fefe23b89857e49113c174f9ef7
SHA1

8584b89e0c3613165c8f2ed62243d49d17a3e8d7
SHA256

6a5a7852b9de696596c886d6095bfe90a0d7f31afdee43c7692a0edb40065f64
SHA512

3c801eb2e1a5ae41cc0bc4b8c27069f41ba42c35143a770b9fae4cccbde427867bee34209972eed046f5eea9a2f81068ce71b4cf44c625f2faa5c7b5b7cdcf49
SSDEEP

192:ZEmPFh1sTUoyngte7AScRcHWa5PW5iqDzQaFUnRhTurneYLgO3HJ:ZEm9h1s4RHc6Pc5ZRUSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f549fefe23b89857e49113c174f9ef7_JaffaCakes118

Files

0f549fefe23b89857e49113c174f9ef7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dcde66b73890271f1ef2b085a4e6694

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
LockResource
GlobalAlloc
LoadResource
SizeofResource
CloseHandle
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetWindowsDirectoryA
GlobalFree
WinExec
FindResourceA
GetStartupInfoA

user32

wsprintfA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA

msvcrt

exit
sprintf
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ