f6a1bd372284cb549f88daa4eb90f316_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6a1bd372284cb549f88daa4eb90f316_JaffaCakes118
Size

24KB
MD5

f6a1bd372284cb549f88daa4eb90f316
SHA1

20dbc8c6834431d6fc6319b7b76324f524d75022
SHA256

48ffb59324fb204b18f17e6f82144ac97c505b2276e90295faa0832cef28b4b0
SHA512

8bc06a0c85e50a60695c7a1e92dee174397eef1dead19dfb2a5b0bd2db165f1c1df0ca4fdbe1a9cc5d19bd7921e2e4c069943067f8d40a789e0e03a91fd95462
SSDEEP

384:9VNUHiHWS50Tm1NpfoDWbMJ3e3Y74HiAxQ:vNUHaF5bncWQNe3akQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a1bd372284cb549f88daa4eb90f316_JaffaCakes118

Files

f6a1bd372284cb549f88daa4eb90f316_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebb65c9ffa1031b0826eb8543877eed6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetFileSize
CreateFileW
CreateDirectoryW
GetSystemDirectoryW
FindClose
FindNextFileW
FindFirstFileW
ReadFile
FreeResource
GetProcAddress
LoadLibraryW
FindResourceW
GetModuleHandleW
FreeLibrary
WriteFile
Sleep
CloseHandle
SizeofResource
GetModuleFileNameW
GetStartupInfoW

advapi32

RegSetValueExW
RegCloseKey

msvcrt

wcsstr
wcscat
wcslen
??3@YAXPAX@Z
wcsncmp
wcsncat
wcsncpy
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
wcscpy

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ