8443f36c5b588b7f8afe8d84b75373f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8443f36c5b588b7f8afe8d84b75373f4_JaffaCakes118
Size

67KB
MD5

8443f36c5b588b7f8afe8d84b75373f4
SHA1

67aace231c49148061b9088cf24317e0d2b2f904
SHA256

b767b1b406ad687609ef5a358c9ff53a13f1d391ca8f655bad31ce75f39550e9
SHA512

b2d0a0f6037cb6852f5cf5092e86776cfb2d241d655bfdf520230fe9136a387c1a65c83efab6559003b6502eaf7918f6932a6559ed07d8b8e9c375c4163a6146
SSDEEP

1536:wXlado1U+sbfYtrLqEPTo7eq7bH2IWrAsddFdwWhjK:mZPsjYt/qErI5H2pF/nK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8443f36c5b588b7f8afe8d84b75373f4_JaffaCakes118

Files

8443f36c5b588b7f8afe8d84b75373f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c53b95761425fc00b8b9e0006657fe6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
AddLocalAlternateComputerNameW
GetEnvironmentStringsW
GetSystemDefaultLCID
EnumSystemCodePagesW
FindFirstVolumeMountPointA
RemoveLocalAlternateComputerNameA
DefineDosDeviceA
CreateFileA
EncodeSystemPointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE