fa99c6ca6621a1fd5ca6cbe5014d2ebd_JaffaCakes118 | Triage

Sharing

General

Target

fa99c6ca6621a1fd5ca6cbe5014d2ebd_JaffaCakes118
Size

83KB
MD5

fa99c6ca6621a1fd5ca6cbe5014d2ebd
SHA1

1b6cc788627ffad163e49b1e96a27003a529d3ec
SHA256

17c01ab0e09df0b765bf67817069ebc3faf118dd36638810710b6daa5822f54b
SHA512

f83e8768124c34a130a3a180c38e249d82b430b49be6a6cc94d1156ec3ac64b64bcca279b93a97344f947bd3cf9865064648db7d0bb478f8a170ea65dc6b51f2
SSDEEP

1536:EUrjiu4qASEbL4Wx/x5icix+iXZQscOyv1OnPNf1BnJNP7dcntGQA58Em:EOjT4qex3mXQ7vgPNf1Njdrm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa99c6ca6621a1fd5ca6cbe5014d2ebd_JaffaCakes118

Files

fa99c6ca6621a1fd5ca6cbe5014d2ebd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0acced9df51f1460ec3922f6d107529a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EraseTape
ConvertThreadToFiber
OpenJobObjectA
FillConsoleOutputCharacterW
SleepEx
SetConsoleWindowInfo
_lwrite
GetTickCount
LockFileEx
SizeofResource
GlobalSize
GetFileAttributesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE