3cac890579aef56f7cbe967d7380b1fb_JaffaCakes118 | Triage

Sharing

General

Target

3cac890579aef56f7cbe967d7380b1fb_JaffaCakes118
Size

95KB
MD5

3cac890579aef56f7cbe967d7380b1fb
SHA1

0fbf35a5102bca37aea8b496c7446787f0eaa33c
SHA256

84887b469c40ba206e82bc9db932a3e88d2c4e6d0c71f494571584a828ef645d
SHA512

299adf77bdd21faabcfee0ba4d2661a964669436457c1892fc50506e60b5b61cb12b0736268b76c1955af93280cbfcf486b704177c85706206ac23436f1617c5
SSDEEP

1536:BG6RFGu5TXlOqNpeKJ3sT7auPVw6VP684F8OaRn2fTYU0t0l5snR+7WGDFBj3P7h:A6RI9qNpXZs6IVzVP54BaR2x0t+Ss7WW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cac890579aef56f7cbe967d7380b1fb_JaffaCakes118

Files

3cac890579aef56f7cbe967d7380b1fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4e75b36546f8aaa58b98de0753ff284

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetConsoleAliasW
EnumerateLocalComputerNamesA
FindNextVolumeMountPointA
UnregisterWait
GetVolumePathNameA
CommConfigDialogW
OutputDebugStringW
WriteConsoleOutputAttribute
CreateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 39KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE