aa13be5e34d89730b1e620218cab687a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa13be5e34d89730b1e620218cab687a_JaffaCakes118
Size

67KB
MD5

aa13be5e34d89730b1e620218cab687a
SHA1

3fdf44577608ee6b66b7c40027d656b8b4883e47
SHA256

897533f33b07efaa474923219ab27093001b46ae7133de3acd4b5ea39862f9a6
SHA512

7bfff65a570ae32665fabf5429437325e615aaef3f2beb36555b692634bd143e6dccce1bb0fffa26bfaf112c55c9fac100f3802a2ebd59eaed329d934c908f36
SSDEEP

1536:2GVci91RqdGGQYMWeiZEdJRZl1PCDgLaJnreBJhnIK:23M1RqdGHYIx33CMCefhnIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa13be5e34d89730b1e620218cab687a_JaffaCakes118

Files

aa13be5e34d89730b1e620218cab687a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9824efad00c9a973579c85bc990cfafc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleInformation
HeapCreate
SetVolumeLabelA
SetVolumeMountPointW
GetPrivateProfileSectionNamesW
UpdateResourceW
WriteConsoleOutputCharacterA
WriteTapemark
FindNextFileA
AddAtomA
GetConsoleDisplayMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE