fc723fd8fdccb407fa2033f5db9fdf68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc723fd8fdccb407fa2033f5db9fdf68_JaffaCakes118
Size

2.6MB
MD5

fc723fd8fdccb407fa2033f5db9fdf68
SHA1

26646f31875b2d2a86babb6e01893a54e22480ba
SHA256

be89f4804231a8bd0f9607f0c96e88e35b625649688bf889186177bf6c737b23
SHA512

e74e013ce4188000d49913c1db358295c8a51ccd57407575f5af9166e208ad2ccb86e2c5de23f1bd2ac0039d3abdf742aee40413a05b908e311fb5d022d41a98
SSDEEP

49152:2uaXOWCjKJOh9j+xSnMuNfxu8VKlM+cOOv7qp4cRvmRabFHW9tG6WPv4BB4/ZJ:2HXpyzb+xxuO8o4cR+RabNW9w6WPgb2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc723fd8fdccb407fa2033f5db9fdf68_JaffaCakes118

Files

fc723fd8fdccb407fa2033f5db9fdf68_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8bd1b0674d49161bbba4d175664b5c05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ReleaseSemaphore
NlsConvertIntegerToString
SetHandleCount
VDMConsoleOperation
BackupWrite
SetHandleInformation
DosDateTimeToFileTime
AreFileApisANSI
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 4KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ