6083f979fdd3660876733e1f192dad8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6083f979fdd3660876733e1f192dad8e_JaffaCakes118
Size

19KB
MD5

6083f979fdd3660876733e1f192dad8e
SHA1

4f798527c3a871712a2800b7979a6a5de177c3bf
SHA256

c50084d6e3936a3fedbe065e7543b1e94c2318dc4031a34f04c940df4ef26f62
SHA512

2bce03a0404524f82b02d200b0c0dc5e3644c9d04e37869cfe3e916b37c59565db782457d69a423b822f18e01a46be153c7a57bc21afb46f5115b3962e3ee178
SSDEEP

384:XqxrYRogzu9aCzGQMvnWXpIQhV2JWma/cyACuSW9Ktmtgrg:CQuoCzGvfGpIzfa/ASWAmqrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6083f979fdd3660876733e1f192dad8e_JaffaCakes118

Files

6083f979fdd3660876733e1f192dad8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9232450e6a8aed5e3c105d8b4a0850d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WinExec
WriteFile
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ