305ae9a08a88b41572ddcb45d567458d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

305ae9a08a88b41572ddcb45d567458d_JaffaCakes118
Size

61KB
MD5

305ae9a08a88b41572ddcb45d567458d
SHA1

3166cdbfbfce70fc7b699b5b43488c4ecf8892b0
SHA256

2f547e50d136ce75698adbd19e92e655f9d8b5275e21047fb5bb407215f10a7e
SHA512

939afd2cdd1061c8b10b5f65159ccb5a7bdbdb6d6d8a23f4f061c8c027001921043b68b896f03a3b29315eb4d45ce055259edaf861275fab5760e27c13f57bb3
SSDEEP

1536:W+pwwwwHMwdPy5ID+C9ROGYeYAGp0FQMzz2OBPMt96CFPWo/Jl20B:Wi65ID+C93dopAziM0t/VY0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305ae9a08a88b41572ddcb45d567458d_JaffaCakes118

Files

305ae9a08a88b41572ddcb45d567458d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee42602adbefab1365e509e452d549e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
GetVolumeInformationW
FindActCtxSectionStringW
HeapSetInformation
SetVolumeLabelA
FillConsoleOutputAttribute
ScrollConsoleScreenBufferW
_lclose
GetVersionExA
GlobalFix

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE