fbff6c17f67b358f9858f7a8510a5136_JaffaCakes118 | Triage

Sharing

General

Target

fbff6c17f67b358f9858f7a8510a5136_JaffaCakes118
Size

63KB
MD5

fbff6c17f67b358f9858f7a8510a5136
SHA1

432f3e8f5b92194cf72a729fb87121eddba30005
SHA256

28fdb863de4b11a1f1e3f74fc702a6d2957116526f101d53342140bbd7709e63
SHA512

88fd7bd04e5950832af3856b00855ace9460dcb0767326931dac2c6f2a19aa8be3fb4c2f9cf834b1e336e09156a77640dfabe7da83fcf7e71ac4a4f16beaa4e8
SSDEEP

1536:sKIVDSxKfmU2DKn4NOwGoTTPqNZvmv63ZuONihvowq1:+Vm9RXDOcvwseiVo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbff6c17f67b358f9858f7a8510a5136_JaffaCakes118

Files

fbff6c17f67b358f9858f7a8510a5136_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d9f2f08ac2959a893825024ebd90586

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetQueuedCompletionStatus
LZOpenFileW
CreateIoCompletionPort
GetHandleInformation
BackupSeek
GetTempPathA
WriteConsoleInputVDMA
GetBinaryTypeW
EnumUILanguagesW
CreateHardLinkW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE