07469cc8323735a21dd7b3dc1c291444_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07469cc8323735a21dd7b3dc1c291444_JaffaCakes118
Size

111KB
MD5

07469cc8323735a21dd7b3dc1c291444
SHA1

73a3cb1f4f8ef8cd32a3349a18039db515832b17
SHA256

d09601c5fe6f62df373fb8fb24f64a67d06e9ed59baa3ce107ae1c96eda79187
SHA512

8d59135c6fb4ea4a23467db258d210527ea31abeae095fe799089c20aacb79dbfad4e0048e76a72994f7bec1377eba06c4fcb7618bf02881f83475e976dec49f
SSDEEP

3072:e2222ZTGtmQgdGpJeHYiDxlKtjBkMqhGKZTbM/x2bBS:e2222ZTepgd1tVwZibZU0b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07469cc8323735a21dd7b3dc1c291444_JaffaCakes118

Files

07469cc8323735a21dd7b3dc1c291444_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2768c44bb43c53dd422910361bde6e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZSeek
CopyLZFile
_hwrite
GetVolumeInformationA
RegisterWaitForSingleObject
CreateTapePartition
InterlockedFlushSList
Sleep
FlushConsoleInputBuffer
SetCriticalSectionSpinCount
FindVolumeClose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE