c972689968cbe0f37057b1259f318089_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c972689968cbe0f37057b1259f318089_JaffaCakes118
Size

63KB
MD5

c972689968cbe0f37057b1259f318089
SHA1

9305f981f37f95ae51af46caee5370250921247c
SHA256

0d0609f842beb371e6fca4cf3e99889288802587726ca4ad0dde91956cee1347
SHA512

d3b24c50aab9a82c1e88758c8432dffb88840ba028397d7954d8879103129c728a24b397a675834697aa4d177740b53bd9d301a243d208a91d42a2022ca2d5b6
SSDEEP

1536:vlmKFHy43KOaEUaDaifvOA4OI7Q5iUt7qmTGLm6tWj:tmKREONJaovpNIM5iu2pLFWj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c972689968cbe0f37057b1259f318089_JaffaCakes118

Files

c972689968cbe0f37057b1259f318089_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ec204d73037e9937d202ad7da03977f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
GetVolumePathNamesForVolumeNameW
SetSystemTime
VirtualProtectEx
OpenMutexW
SetEndOfFile
LocalCompact
GetPrivateProfileSectionNamesA
FindFirstVolumeMountPointW
SetConsoleCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE