fef46640f973461394f424e0196d4c0a_JaffaCakes118 | Triage

Sharing

General

Target

fef46640f973461394f424e0196d4c0a_JaffaCakes118
Size

51KB
MD5

fef46640f973461394f424e0196d4c0a
SHA1

00fe3938cac2dcd3eb4d22a1de6ebec3d6d216cd
SHA256

f5a4d0e83d20c19d0c1b3d80baed324cbc55e54a26b69bd8051763a8e69dae93
SHA512

1592efdd1c2f0c1583882042ec2da8d39a9943b50bee5cd756097be0262692549925412bfb32b8e8dd44a2504f505a43bbf16c37cb0a4362a5f91cb1b7b4c734
SSDEEP

768:CKhuClzqXr3Yrf4FQSuLxrlMMMMMfMMMwMMMMMMMMMMYMMMMMMMMMMMM3MMMMMMl:CXTXUtSuf+1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef46640f973461394f424e0196d4c0a_JaffaCakes118

Files

fef46640f973461394f424e0196d4c0a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

54804ec924842829fb1cab8bd02cab15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
MoveFileExA
WriteFile
GetSystemDirectoryA
lstrcatA
GetLastError
lstrcmpiA
MoveFileA
GetModuleFileNameA
WinExec
CloseHandle
lstrcpyA

user32

CopyIcon
SetSystemCursor
LoadCursorA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE