fbb9948e5a0ed465eac10d1a03449203_JaffaCakes118 | Triage

Sharing

General

Target

fbb9948e5a0ed465eac10d1a03449203_JaffaCakes118
Size

52KB
MD5

fbb9948e5a0ed465eac10d1a03449203
SHA1

c51fafa17827be8f81bac717cede8838168118ed
SHA256

888fefef4bb5b00576c2e1785c18b19addb0631bba17058e487cbd1282eb9241
SHA512

f6009bae1626cb2f3472580cd31f9efa94a6bc2e6c9b50578bad053d6eb6cb6043ccb55f373ee6fc2360e6850c58a7777526ea9fc034f11f85133861241c393d
SSDEEP

768:6EMd6W1OIX6Tn/1gb24IKA5ER443Evh5tEpUtuFGn1+z7FeMag:lb2a/1y24IKA5Em43E4En1k5eMZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb9948e5a0ed465eac10d1a03449203_JaffaCakes118

Files

fbb9948e5a0ed465eac10d1a03449203_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccf159e971f732545893fe1445557337

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CreateTapePartition
SetEndOfFile
CreateFileA
ExitProcess

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ