07cd7f91cd7931c2a9018259523ba1a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07cd7f91cd7931c2a9018259523ba1a6_JaffaCakes118
Size

63KB
MD5

07cd7f91cd7931c2a9018259523ba1a6
SHA1

041e79e1e987679f4ee7a1624f8b5f1d94fd819b
SHA256

4874f7dbf72a3729b291272a625e69e2844104e1851f673a0f53f3149d45c7b6
SHA512

7bbb4a5ad000b488174d717b2c2247fa2794e9acc61f2ed9a7dee0fee743b3e9232f1781f7b4ac2dd357b72e181c9443f453363bcfa4c33392648475b1d3d68b
SSDEEP

1536:OUcoli6c8mzMnnnnnnnnnnnnnnnnnnnnnnnncpznDdpGjCVvbMCSGIBLfj:1m8mMnnnnnnnnnnnnnnnnnnnnnnnn8De

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07cd7f91cd7931c2a9018259523ba1a6_JaffaCakes118

Files

07cd7f91cd7931c2a9018259523ba1a6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7a37cb09c5abd1b186bdfc830122d7fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
CreateDirectoryW
CloseHandle
GetEnvironmentVariableA
OpenMutexW
lstrcmpW
CloseHandle
GetDiskFreeSpaceW
GetConsoleTitleA
CreateEventW
GetExitCodeThread
GetPrivateProfileSectionW
GetModuleHandleA
ReleaseSemaphore
GetVolumePathNameA
lstrcmpiW
WaitForMultipleObjects
GetFullPathNameA
HeapCreate
GetModuleHandleW
GetCurrentDirectoryA
CloseHandle
GetFileAttributesW

certmgr

DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.pack
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE