3f60dc33a954f65dbf859d47e2e49ab1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f60dc33a954f65dbf859d47e2e49ab1_JaffaCakes118
Size

67KB
MD5

3f60dc33a954f65dbf859d47e2e49ab1
SHA1

9ce635cb4bde86a742c3d70c2bbc650d5f567144
SHA256

f4b9d798565a2d1f2967b621a1ed0137576043de04ca7da419db51c456f1e1ef
SHA512

fed977e0dbc171d3a9f7ef25d81d2a76021f6863c186fd0dd77883f0a9fcb63c09d7f13c504d91b4ea9f0ba37c9570cd04eed627d7f0fe0aff16340d4635e2c5
SSDEEP

1536:se/kUNxdV/bIJYFC+9oNlV1sUT0O3mCwwoDpmK:bkUdV/bIJsC+c/T13mCwwvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f60dc33a954f65dbf859d47e2e49ab1_JaffaCakes118

Files

3f60dc33a954f65dbf859d47e2e49ab1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3acf5e4c6cc9e55f484b4c7f03e355b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
CreateFileW
DnsHostnameToComputerNameA
FillConsoleOutputCharacterA
GetProfileIntA
RtlMoveMemory
GlobalFindAtomA
WriteConsoleOutputAttribute
EraseTape
FindVolumeClose
CommConfigDialogW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE