fc232ba39468535ecadedf02c3fdbc3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc232ba39468535ecadedf02c3fdbc3e_JaffaCakes118
Size

16KB
MD5

fc232ba39468535ecadedf02c3fdbc3e
SHA1

2fe5547d400860d5ba80f1981d9422dca959024c
SHA256

bc73b1037989fb0c2fd07a46044c7e15e7fa74c75009974a5e1cd1a0fd798270
SHA512

b9493310d3434f475a5c91877102a6cad2e9d84ccaed4cbcd9a5250006fd5ddcf05a09ec5881ca2bd927bd4eb59b6358d14a32434d948e131203760b768b9c1f
SSDEEP

384:VOa1UeUfSQG7X2l+ngz2QI2PgDnh+wKTwv8ZBxP:dXUNRlad2Pg1+vwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc232ba39468535ecadedf02c3fdbc3e_JaffaCakes118

Files

fc232ba39468535ecadedf02c3fdbc3e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

04c9dad1102153696a563b0724502821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE