fb90855a5739646d12ddc42f2418dde6_JaffaCakes118 | Triage

Sharing

General

Target

fb90855a5739646d12ddc42f2418dde6_JaffaCakes118
Size

83KB
MD5

fb90855a5739646d12ddc42f2418dde6
SHA1

6753eec5531bd821936363c99c61bda32f135d5b
SHA256

a80d16ae0814c7a1d0727b59b2d13d6cca50830a24213c0498ee1f59a9bee27a
SHA512

83b1dfea16739113ed9cf9671e80cfee87574af69077417f755625b8e18088405791a5091a46c104bf19a6b7d8b8cb8606b30960b55c7c326c46e7125699440d
SSDEEP

1536:cVl5uHRdzY0Pti7wFIXTAcq1H3O5NZWpjVrs2ryrd1vUQuqwcizSkX:Uuf00lGOZ+lWHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb90855a5739646d12ddc42f2418dde6_JaffaCakes118

Files

fb90855a5739646d12ddc42f2418dde6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a45fbe745269903f4a52d205cf5ad12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsA
DosPathToSessionPathA
GetConsoleKeyboardLayoutNameA
lstrcat
DeleteVolumeMountPointA
SetConsoleIcon
AddVectoredExceptionHandler
SetFilePointerEx
lstrcatW
EnumUILanguagesA
HeapLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE