363b011c367c37e8d7d9f7dcef75cf19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

363b011c367c37e8d7d9f7dcef75cf19_JaffaCakes118
Size

56KB
MD5

363b011c367c37e8d7d9f7dcef75cf19
SHA1

961da40034bbfae7366c139301d49db7458dd63d
SHA256

1995d87e389de4220a48418612c0afc42c1b9becb6601dc2023f5203285aa719
SHA512

b5a8d7ea6753d0e13715a920c0b15e49499fa0c5ef030dc6808d2cfc6cee65bd351e076f8bd200666de67b476a4635f606f7eef4b1d2925f413fa0f3da32b2de
SSDEEP

1536:V7B3gmlckMmmdxTytMPGXlqUv3dWzu4qZfDRXEu:pckedxmuPAH+qNp7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
363b011c367c37e8d7d9f7dcef75cf19_JaffaCakes118

Files

363b011c367c37e8d7d9f7dcef75cf19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56620b31ad5f7032001b9f033e981a6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
FindFirstFileW
VerSetConditionMask
GetFileAttributesExW
FindVolumeClose
IsBadWritePtr
TlsGetValue
WriteConsoleOutputCharacterW
SetConsoleMode
Module32NextW
_lread
VirtualUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE