fe76cb7fb5e18a6b8abdee1c35eba403_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe76cb7fb5e18a6b8abdee1c35eba403_JaffaCakes118
Size

18KB
MD5

fe76cb7fb5e18a6b8abdee1c35eba403
SHA1

4397bbc3192d0fc1cc0f6e48b87590582dd7e703
SHA256

4d3f0858733e9bc10e243a5eac3799375791f028f4f118c190b1ad2ad80da45b
SHA512

08feb8b8d987746a2721788f53627b64198a210af3f136ceaba67e49e721cb2156eb255bd63257abe58051a8c818923607202a4a9be5c4b5af5e251d89fdeb9a
SSDEEP

384:Z5CuBe5/vi+MxOBz73TG0gVwmefTkddHdxp4t/SPW5554txCW4N:yPi+MEA0gOme79/SPW555GxcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe76cb7fb5e18a6b8abdee1c35eba403_JaffaCakes118

Files

fe76cb7fb5e18a6b8abdee1c35eba403_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcd40139a285c3ca99e9e2854f2696bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
GetTickCount
DeleteFileA
Sleep
CreateProcessA
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle

msvcrt

strcpy
_strlwr
strlen
fclose
fwrite
fopen
sprintf
memset
strcat
_stricmp
strrchr
rand
srand
_snprintf

setupapi

SetupIterateCabinetA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ