fc507a6b51cc99004c63d6bd31eb2f7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc507a6b51cc99004c63d6bd31eb2f7b_JaffaCakes118
Size

10KB
MD5

fc507a6b51cc99004c63d6bd31eb2f7b
SHA1

36fde415ac19e56ba8cba5995c7ee41685d51270
SHA256

aa1dfb133b86145e23f9bd4cf237ce6fd2725b1eb25804a15acaf6ce9f0cd808
SHA512

4789af6d845c11622b835609bb1593811ee22017c0d5a588c9bbd53613efc31827f8ef57bf342c8d01fe6514183db5605ee9cd284010d82b6072f74b2a930000
SSDEEP

96:ZWHCQ1/vboRni89zRZZ9KefDTie6XXfZh2UTp4h+G2YuEv67:qn1/ToRniqzRZTKerTj6nf32qI92Yu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc507a6b51cc99004c63d6bd31eb2f7b_JaffaCakes118

Files

fc507a6b51cc99004c63d6bd31eb2f7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5783a27d491814f88fc054db51ec9db6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
Sleep
lstrlenA
lstrcpyA
lstrcatA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

urlmon

IsValidURL
CoInternetCompareUrl

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE