060944d53ee9d95dabc041bcaba61a46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

060944d53ee9d95dabc041bcaba61a46_JaffaCakes118
Size

641KB
MD5

060944d53ee9d95dabc041bcaba61a46
SHA1

5a6cb8c9d0c81b13fa6c46c67af1f7f564417191
SHA256

80004c7c4b8b70e6b249ad212bbf2ad3a0f589e58883306c31c41b034f5c55c0
SHA512

578372ded64deb01d71444ddf07b4475cf84f3515dfe41ac96caddc6dd2b57cb6d675495453b062741c9446b11e21abc196c1f280abf6f0e05968e33ffb06e08
SSDEEP

12288:MNLcwdSsBPlKy0CZSCLTZCK6zu0B8LE4U8wim22gTGoX0BuxzaCO8r7PD:8dSab0CZSEx10Bp8w9qTlULC/rf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
060944d53ee9d95dabc041bcaba61a46_JaffaCakes118

Files

060944d53ee9d95dabc041bcaba61a46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

80f5014c594cacc9d725df6e731fc575

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

nddeapi

NDdeShareAddA
NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

kernel32

HeapCreate
FormatMessageA
GetOEMCP
GetModuleHandleA
GetDriveTypeA
ReadFile
HeapAlloc
WriteConsoleA
GetFileAttributesW
GetCurrentProcess
lstrcpynW
Sleep
GetProcAddress
CopyFileA
FindFirstFileA
FindResourceA
lstrcmpiW
CreateFileW
GetSystemDirectoryA
SetCurrentDirectoryA
SearchPathA
GetLongPathNameW
CreateSemaphoreW
OpenEventW
GetCurrentThread
CreateProcessA
SetSystemTime

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.aml
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ