07514bf5c818096ff48a05e288af8f6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07514bf5c818096ff48a05e288af8f6c_JaffaCakes118
Size

56KB
MD5

07514bf5c818096ff48a05e288af8f6c
SHA1

408fd1b5abb3ee3b8c3a4f532add667a61e374f7
SHA256

5ceeab41fc63ee0ec86d0b35a8ff3f8051bb0015926f12032f22f2c4785ba81f
SHA512

41ddabae978e869dcc1dcdd6700b7d3d66ddb6663ee3ab30d9375041acf259765594228352ebfd670b71f768d8b75ad91a77221d4f8de3be445b2bbdabfb2b1e
SSDEEP

1536:D1eZIWtXmxPD5wlkfp7y7/O23xDphiGM7KsyK3JC4JkUZhH:cZhXmxtwl8ZyLFNXiTKsyK3JCiZhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07514bf5c818096ff48a05e288af8f6c_JaffaCakes118

Files

07514bf5c818096ff48a05e288af8f6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14f529e2867fd571e623caca2a6bc5d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceW
GetTempPathW
GetNextVDMCommand
GetDiskFreeSpaceW
GetFileInformationByHandle
AddAtomW
IsDBCSLeadByteEx
GetStringTypeExW
CreateMutexW
BaseInitAppcompatCache
FindNextVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE