4c6847dbcf4cd6c44812cb52ea17a95c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c6847dbcf4cd6c44812cb52ea17a95c_JaffaCakes118
Size

128KB
MD5

4c6847dbcf4cd6c44812cb52ea17a95c
SHA1

eae41406f808188cc96d215eadb920c31e131c79
SHA256

f2ff4bf226fea2fa6e0d05b18ee80c5721f33738abb515fb17eaa269f4c36960
SHA512

48f2cfe31c74fed740ac51f0943171ba82e9ba9c181492f5c74a4909eaf943766c45dfa5baed2fadf5a590456345e6f8260673ddc767468ca2fb9dab37582afc
SSDEEP

3072:2njBTgxJIdnVmLhDx/dBdd68ttESy+X5xqw2pzhjc//umXTu:2nFUJIdnVmLLzddu+JYTlcXFXTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6847dbcf4cd6c44812cb52ea17a95c_JaffaCakes118

Files

4c6847dbcf4cd6c44812cb52ea17a95c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88dab687fa9ee860bc2c24b861c5e8b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

SystemParametersInfoA
MessageBoxA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

imm32

ImmInstallIMEA

Sections

.text
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dsf0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.dsf1
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ