f4fc20d1992770e44dabe4fa3399be78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4fc20d1992770e44dabe4fa3399be78_JaffaCakes118
Size

85KB
MD5

f4fc20d1992770e44dabe4fa3399be78
SHA1

f2c9959c76c27afea471ad4c3e84eb84bec53754
SHA256

36e561921c0702662ce646f9a95e361195405b853c1f5999f8958809fb424bc4
SHA512

cf42f003908ff397c0c9ea41ef2e895bf5b36fdd7bf6d2672d2df5a3a711b2b7e7682f004969404c8f0e85689e41878cde64da8e2f901d837e9f17f8d0dea2f6
SSDEEP

1536:L2KdASt3jk/0fMfJXw/kzLbudb2RaXm1HRVUDc6jFr+sX5bosluG4h2lX94AaduX:DdASt3o/0f4XUkf6db2RL1HRVOZysXR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4fc20d1992770e44dabe4fa3399be78_JaffaCakes118

Files

f4fc20d1992770e44dabe4fa3399be78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

621e9eb25026348dd0b9bb98053b19f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemGeoID
GetDefaultCommConfigA
CreateThread
MoveFileA
UTUnRegister
GetConsoleInputExeNameA
WritePrivateProfileStructA
GetBinaryTypeA
VDMConsoleOperation
ReplaceFile
GetPrivateProfileIntA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 71KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE