fb78e2dcf16f75468b95a5730a574522_JaffaCakes118 | Triage

Sharing

General

Target

fb78e2dcf16f75468b95a5730a574522_JaffaCakes118
Size

35KB
MD5

fb78e2dcf16f75468b95a5730a574522
SHA1

c58dfe6fedf706d88627835f5338e428b7f4afc4
SHA256

9d1fe87b05b6bb0f7e424778833415d557acdfc8d8677da2462a0529fa2e68ed
SHA512

a7751b0faed8a7aa7c30b844386cb233aa09d1edd50a90bdfd00aa8cbf4935fd7493b1bfccfa7da4775ee4f87ba50a914089838cec4f89a8f50bc14da14203d1
SSDEEP

768:HBRWZLG7yRUePtICy1QoqVssBz9jprrYsa9IPMwzVrcNLD1:hRWE3q1jJjZhiIkwzVqLD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb78e2dcf16f75468b95a5730a574522_JaffaCakes118

Files

fb78e2dcf16f75468b95a5730a574522_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ