7570f273c6e06a82a7098a632644a63e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7570f273c6e06a82a7098a632644a63e_JaffaCakes118
Size

67KB
MD5

7570f273c6e06a82a7098a632644a63e
SHA1

12ce89352822c9545367b333a200ae423097d38f
SHA256

26eebe69e474e09f4c873750da0166f0fe3559d4e945a6c486317a511ec121d3
SHA512

53a195d3a5261321078e0bba733d3edd2f27a82ef7ea3a046cf6035f2eaf6ce6e5cfbb51a20825e1c605188e5e51487158d7e3be6f5e9adc3f6da3a8bf402bcc
SSDEEP

1536:60Ss8A334dtwd9thxr7Q6iJnB+3K36AlL+VlA8P87+Qlfq0X:Th34t8tht78VB+XAUNP87nlpX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7570f273c6e06a82a7098a632644a63e_JaffaCakes118

Files

7570f273c6e06a82a7098a632644a63e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af958654db40c1757abfc76f59ae6dab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
ReadProcessMemory
AddAtomW
CreateDirectoryA
FlushViewOfFile
MoveFileWithProgressW
DnsHostnameToComputerNameW
SetCommState
GetSystemWindowsDirectoryW
Module32First
WritePrivateProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE