3ee0255c5ba6fd15d6e266e29eac3b33_JaffaCakes118 | Triage

Sharing

General

Target

3ee0255c5ba6fd15d6e266e29eac3b33_JaffaCakes118
Size

56KB
MD5

3ee0255c5ba6fd15d6e266e29eac3b33
SHA1

78121a1e7fbc66b813fbc940e05df4e7b0c579d7
SHA256

d51ebab5f80fafe7d7d4efa4490badc06af8116d92095a214be9c222db0753fe
SHA512

c953038515cb05653a4d041a06f26ef6b59a057d3ae693b1299571585c164eabff3c27c5763fbfe741b03e368773203ae4e12a08549bc1daffa87101dc14d646
SSDEEP

1536:FPKkRYeOd3FFI8JZKILniBJR6KKiPkEl10bz3:FPvRYxrIKViBHsEl1m3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ee0255c5ba6fd15d6e266e29eac3b33_JaffaCakes118

Files

3ee0255c5ba6fd15d6e266e29eac3b33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

459dad2bc55bcd4f00c8f73c2ecdeccb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZCreateFileW
UnregisterWaitEx
GetVolumePathNamesForVolumeNameW
WriteFileGather
FreeResource
DosPathToSessionPathW
LCMapStringA
SystemTimeToFileTime
EnumerateLocalComputerNamesW
FindFirstVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE