ef736a4fde808f76a4b9b7a56e090228_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef736a4fde808f76a4b9b7a56e090228_JaffaCakes118
Size

64KB
MD5

ef736a4fde808f76a4b9b7a56e090228
SHA1

33e5f1b6443d72a4ba9d83b4f0a87370bb19654b
SHA256

92da4e952dc8b1c9013d5d26077203f21704d6d3a7693750fa5ddd297cb08a63
SHA512

d1945f34157f17c5f2dbc6951ef098356f8e86e0a5dcf9e091c7b109cffd26fe66e75d273147deb737caee10d68c43e4b5684e57bdc8c0e1b5c05eb9d760b3fe
SSDEEP

768:wQARc+vkT54iKP686ozdijjKFsP8rfzPlkOFMK9hb5l45DrF1KK3:nAy+cT54ijqZsyGNK9J5S5FD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef736a4fde808f76a4b9b7a56e090228_JaffaCakes118

Files

ef736a4fde808f76a4b9b7a56e090228_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25cb7c07bf3d0f991051a7cb7e3cf3fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindVolumeClose
GetConsoleAliasExesA
InitializeCriticalSection
GetCurrentThreadId
GetProfileIntA
GetFileAttributesExA
WriteFileGather
GetDriveTypeA
DosDateTimeToFileTime
GetCommandLineA
ExitProcess
GetStartupInfoA
ReleaseSemaphore
SetCommTimeouts
SetLastConsoleEventActive
PrepareTape
CancelWaitableTimer
CreateTapePartition

Sections

ATSEC0
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ATSEC1
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ATSEC2
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ