fb7576aea49b2142b65b95889db31d67_JaffaCakes118 | Triage

Sharing

General

Target

fb7576aea49b2142b65b95889db31d67_JaffaCakes118
Size

56KB
MD5

fb7576aea49b2142b65b95889db31d67
SHA1

b7adf23e1d1f1da1f2d493f79c8eabd053d3eb6f
SHA256

61340b0345e2205fdaa1b9e2a6dff37db3e493f4c053c05c7375ec5fd5d8b29a
SHA512

2929e75d3a0bc4910eec1968730eae64af93f5f2e233ee154b0cf352fe71102cd83d0cb4554e96bb82add00ae0347d6efd8ad3c94c39822dc5fa49a31aca2667
SSDEEP

1536:ob+05Tc8QfpidIgvg3dhJ5i3JTqOIAG5qEA:/8W4dvs5I0OIAG5qh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7576aea49b2142b65b95889db31d67_JaffaCakes118

Files

fb7576aea49b2142b65b95889db31d67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7326e983a0642d85754148d43f70ec1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDllDirectoryW
ExitProcess
RestoreLastError
TzSpecificLocalTimeToSystemTime
SetMailslotInfo
VirtualFreeEx
SetFileShortNameA
SetDllDirectoryW
GetComputerNameA
GetNextVDMCommand
GetProcessTimes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE