fc594e86f7c95537c1781531a9e9b62a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc594e86f7c95537c1781531a9e9b62a_JaffaCakes118
Size

19KB
MD5

fc594e86f7c95537c1781531a9e9b62a
SHA1

1f17f8fc3662f68c886ac49fd4505292b4cbb35b
SHA256

f60678cf14f439eb620b9dbd520cd1cfc9b969d37e6168edcac41d38382499ad
SHA512

6e680ca41191ccd579baacfb66e6ab6d8c9b681d55ac393523d5c329fa37af3393699641b2b0445edd39a9b227582d3814924e5f619888642dd03a3c67904557
SSDEEP

384:0wzEYiRogEgUpC2aA3G+BPxF7o1LPGnHUtSVDOWgNmsRkPVoQ0itNQ:0/UxgUpCjV+hXo13tSDhgNmsRkP2Qq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc594e86f7c95537c1781531a9e9b62a_JaffaCakes118

Files

fc594e86f7c95537c1781531a9e9b62a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6785969b4784e4c84bca5dc94af9d926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WriteFile
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ