fc55a68bcebd1c5cef7f70c2f8157cd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc55a68bcebd1c5cef7f70c2f8157cd9_JaffaCakes118
Size

21KB
MD5

fc55a68bcebd1c5cef7f70c2f8157cd9
SHA1

037df46cb1bbd3ffc4b0e55fff353915c3f6bfa7
SHA256

443389bef3755483a9d458a512cee2b735da7756feddd3e472ad410b17494e71
SHA512

960694190b6e11f53830cc4f032b393597f7e9a11659802abec43f4da9576b5ab09227279702bb31efeecf3b474aff66fbea235f4dec9ee9a44a6bb4dce0fa27
SSDEEP

192:z09bmETW089vrpb+me0ue8QuOCqatVKMFZnxtah9Wc1+eMT2QP1yQyR0KV25/LWI:w9ie8vrESuhtVKMLnxu0FAWUQzWOG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc55a68bcebd1c5cef7f70c2f8157cd9_JaffaCakes118

Files

fc55a68bcebd1c5cef7f70c2f8157cd9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ac436f0f66db07e835bbed4b7d679615

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
GetSystemDirectoryA
lstrcatA
CreateDirectoryA
CloseHandle
lstrcpyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ