fb6ce470907ce61aa65a598a3d7f2db8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb6ce470907ce61aa65a598a3d7f2db8_JaffaCakes118
Size

86KB
MD5

fb6ce470907ce61aa65a598a3d7f2db8
SHA1

c4f6c53feeabef708ae3c4f49be2b02d2f24ae72
SHA256

92aa9a0ae186c64e04ecd7d1cea4d31518518976aa9d7a90e075b48d25b75261
SHA512

c040467f0ab0b8a49883112bdb7f6e8a677318ae69b7979089250ad25797d608bdfae6d8bf627c6edaab1a195a75aa2f1254cfe0f62387e914c4dce5ed34e3aa
SSDEEP

1536:jQ295uoyQxc/CzyJ0a3jv0gCn0zXVfJ02fTYU0t0l5snR+7WGDFBj3P7fzIV7i:jTGQaeyfra0LVfnx0t+Ss7WGDrPfzIVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb6ce470907ce61aa65a598a3d7f2db8_JaffaCakes118

Files

fb6ce470907ce61aa65a598a3d7f2db8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

460062af92b75afb94e753cfd6fec21c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSizeEx
PrepareTape
lstrcpynA
RegisterConsoleVDM
FindFirstFileW
SetDllDirectoryA
EnumResourceNamesA
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
FindClose
CreateHardLinkW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE