fb3dc227ca8a97a224b7319707bed6c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3dc227ca8a97a224b7319707bed6c5_JaffaCakes118
Size

20KB
MD5

fb3dc227ca8a97a224b7319707bed6c5
SHA1

c2fc66f02a5bf65cef10604459b15890fec5c428
SHA256

6754bfdf0448a9eb8496765357f627c68aa4c98fe391784640ef8de7a161088d
SHA512

88ba113d9ce84223290bd06325687a857e622aef21dcec74a5bed83bab0353c936e7284f07fd770c982391cfb613c602d6a0380245763b04cb18dcdbfd921b0e
SSDEEP

96:nGE5v6itboynAwa7eOR8Vu2UtVBb3V5zkYkxyjSjb:np6i1oynfJveXBJ9kYkxQSjb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3dc227ca8a97a224b7319707bed6c5_JaffaCakes118

Files

fb3dc227ca8a97a224b7319707bed6c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d14c2b13b0d4a98d9edb2ae13516f4a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

GetDesktopWindow

shlwapi

SHGetValueA

msvcrt

__p__commode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
_initterm
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ