fdc2382d4a909d50d79ce4379b8d8840_JaffaCakes118 | Triage

Sharing

General

Target

fdc2382d4a909d50d79ce4379b8d8840_JaffaCakes118
Size

56KB
MD5

fdc2382d4a909d50d79ce4379b8d8840
SHA1

32055ed7018e00d6c38eee479a9c4de7bd01f8c2
SHA256

660541756d6ff31799ccc1d9d3c7cae5727832c0cbed407c50b6e0e14c58f901
SHA512

3a018d322247facd38e5338683e5ed6279d0d6a3345e1b8c1f64a7c1ce9ac3d7320db595677ef6cb8e4f708643eb5ea158f2b24f8c96fab1e1ad1384c1f742ee
SSDEEP

1536:esqWjzMcs6+RaN2zljweE21S+FebumHnlnNgRfG:ez8U6+RaEBjwpwfwbZlnNgRfG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc2382d4a909d50d79ce4379b8d8840_JaffaCakes118

Files

fdc2382d4a909d50d79ce4379b8d8840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a354cdd54c174d2fe837dcca4850d840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceW
SetNamedPipeHandleState
BaseQueryModuleData
TerminateJobObject
RegisterWowBaseHandlers
IsBadReadPtr
DeleteVolumeMountPointA
CreateHardLinkW
WinExec
CreateSocketHandle
ExtendVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE