3f53baa71bf337f2d95cc86b35ab3b13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f53baa71bf337f2d95cc86b35ab3b13_JaffaCakes118
Size

62KB
MD5

3f53baa71bf337f2d95cc86b35ab3b13
SHA1

287b38e26d83259fee97bca7dcbaa1723422001d
SHA256

f4ee4c547703e4c9d8a35340cb84e2aa0ad7d176ae677fd496d7613470c25dd4
SHA512

1be9bc4ed18d731b7d082c7ed29f483450069a3869953cce1c1b57fe512d2f6c5059542ec6b6fbbd392c46030df5e7d653fdaf68eda6f3a7b6962b13a249f333
SSDEEP

1536:jWYrXqLN0jJKpbox5z1fqRZjA7XWguYZOHP7Uhylw5D0h1VucP:CAqLNw22z5q8jWglK2yl8D0zVu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f53baa71bf337f2d95cc86b35ab3b13_JaffaCakes118

Files

3f53baa71bf337f2d95cc86b35ab3b13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95f27e8d1d7cf83471b216243863d952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
SetInformationJobObject
LocalLock
GetTempFileNameW
GetNumaNodeProcessorMask
WriteProcessMemory
FindFirstVolumeMountPointW
GetPrivateProfileSectionA
QueryDosDeviceW
SetVolumeLabelA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE