11e316ae06b8f1d9f434a0d37afd1c50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11e316ae06b8f1d9f434a0d37afd1c50_JaffaCakes118
Size

63KB
MD5

11e316ae06b8f1d9f434a0d37afd1c50
SHA1

ca1c215e7f5e49f432a0619ddd37a7c8aec78bc0
SHA256

d24364a4ab2c254b6f9662af4a2b3f440fbe844fa711579df37c7956f0bc40ef
SHA512

310bfd1006b85227339f5786cf58136cf0eea20d758d789446513ff2bf6dab0678b6a3096a7b6a0dfddff91040972631a2d8066ff9de74140729d470641fd4e4
SSDEEP

1536:T5uA2WNnY2+DrdQ5Qww1ywFKL1fDsfGDt07ZdMQ:T52NJX5PywFQD/twSQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11e316ae06b8f1d9f434a0d37afd1c50_JaffaCakes118

Files

11e316ae06b8f1d9f434a0d37afd1c50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cd4e572d080663be45a84de5192266e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
SetComputerNameW
FindNextVolumeMountPointA
FreeConsole
ValidateLCType
LoadResource
DebugBreakProcess
GetNumberFormatA
GetDiskFreeSpaceExA
ClearCommBreak
ActivateActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE