af433687ed6f7277362357dc7840eb35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af433687ed6f7277362357dc7840eb35_JaffaCakes118
Size

816KB
MD5

af433687ed6f7277362357dc7840eb35
SHA1

b4990a07a750a731db0600023b3fe93ad1c101e7
SHA256

d2fac74a260ff1487c3ad8ec576c71dd926e56da4b294f1b7eb4098e812ef271
SHA512

58cb92c4ae6a41010969136079e42afe54948645f3ab7a962bdbf3ecaf2b41337e91688aa038327b81bc562c58df9472d3fcdcdeacf11cbbf4e92bc8693f8f8e
SSDEEP

12288:sqKHvS010hR1R5Bw32NKjfWojXAkYaVIwIIisbAllaoBZfKdtNgs21bDpwQN+:aSV1tw3USWmAkYOPqaMZiutKQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af433687ed6f7277362357dc7840eb35_JaffaCakes118

Files

af433687ed6f7277362357dc7840eb35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ebc2163b8795db91f52f7da2e17cab5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetVolumePathNameA
GetDriveTypeW
FindResourceW
GetDriveTypeW
VirtualAlloc
lstrlenA
LoadLibraryA
GetVolumeInformationW
GetCurrentDirectoryW
MoveFileA
GetDriveTypeW
GetFileSize
OpenMutexA
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW

netshell

HrLaunchConnection
HrRenameConnection
HrGetIconFromMediaType
HrCreateDesktopIcon

Sections

.play
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ydata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ