fbaf124cc633c24248f302760c53b7ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbaf124cc633c24248f302760c53b7ed_JaffaCakes118
Size

28KB
MD5

fbaf124cc633c24248f302760c53b7ed
SHA1

43391312d4e0aedfde601877282074a2ff41e5be
SHA256

9ff48e0d1b52c50e6b564885ffe9a6b1858821ec6224cdbb9fda3fe1af1b6acb
SHA512

b889d8db6dce17f8037f154c1df0d397ea76e39237e2d6ce71e3b8ea9fd8a48a6ee3df374cadbc022bf5c4b0dacab3dbd93755e5ba5b1e4c8075a511d9e86baa
SSDEEP

768:tJyEENMk7+HhGvNy2b9AB/Yv8ST4HdLU:OF7tly2baB/Yv8a4H5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbaf124cc633c24248f302760c53b7ed_JaffaCakes118

Files

fbaf124cc633c24248f302760c53b7ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b7ce445276f738683298054cf9c6a51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNextVDMCommand
GetDriveTypeA
GetStdHandle
GetSystemInfo
GetVersion
GlobalAlloc

msvcrt

_tell
_rotr
_tzset
_umask
_spawnl
_stat64

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE