fb9a58730b821c7b7400c17f6f011a64_JaffaCakes118 | Triage

Sharing

General

Target

fb9a58730b821c7b7400c17f6f011a64_JaffaCakes118
Size

34KB
MD5

fb9a58730b821c7b7400c17f6f011a64
SHA1

b3b6c4623962dcafca9589a49005a235ca7ef79e
SHA256

84db4ba8d10a886a7d2e5541448ae7c967df1249838e3f9804b1732b56bccf9e
SHA512

eaef34d3f84cd98bee3e42904d799eb91b00606d7dbeb22d44ed65471752c8eb71775e554d846d6ff6534ded4a134d64613c98c78343e2eb78666cabbe4dad4d
SSDEEP

768:SgiFbAsW63vzxXaW995C+EjPanz9P6lp:StF8v6fzIWr0+EKzYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb9a58730b821c7b7400c17f6f011a64_JaffaCakes118

Files

fb9a58730b821c7b7400c17f6f011a64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE