07f70878fc947677a2f2125061f48f67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07f70878fc947677a2f2125061f48f67_JaffaCakes118
Size

40KB
MD5

07f70878fc947677a2f2125061f48f67
SHA1

67cbafb9f5944662d177da52eb2c665cca5ed034
SHA256

8e0d09c9186c1d5cbde63667db078c85f237a9551f6c9d2e9f98c2cf4dfa8e3c
SHA512

f86de0300bdb1fd8d1dd77b0ed41bf2dbfcdd207201e6c8d8fafabe45137e6bb731acaad5aa9c412003c6e445cae5cea13fcafaf23e7512c6e4477ca203ee1d1
SSDEEP

768:jvGjvVV/V7aEWV2gpFrJIPc1p4BIhsbNFdJxTZ:jvGj9V/laE4pgPLBIqFdrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07f70878fc947677a2f2125061f48f67_JaffaCakes118

Files

07f70878fc947677a2f2125061f48f67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d6e6543e4a1a3fd444e5474ac5b5fb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_tell
_tzset
_umask
signal
_spawnl
_stat64

kernel32

GetNextVDMCommand
GetDriveTypeA
GetStdHandle
GetSystemInfo
GetVersion
GlobalAlloc

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE