066a28de156841bf3b11122b68a90722_JaffaCakes118 | Triage

Sharing

General

Target

066a28de156841bf3b11122b68a90722_JaffaCakes118
Size

49KB
MD5

066a28de156841bf3b11122b68a90722
SHA1

40a3a22cea614a1d1776ec991fe94a784e393d3b
SHA256

950403d1e1e212e879ff5051542fd3f7a42d6bd191bd3e08be94764402c3c83e
SHA512

dee216c245e6ddc6450a3071309512d46ac521ae3a1d3a81efac0d3c80ec9a234f964459719c1b2690b7ca11939b4fd7faebfad3ecd54e3cd9fe156d7625ad7c
SSDEEP

1536:KjiJiYb/D2VGf2QYGWvoefKR2NPf1Ol0b3M:KGJp/qg+QYGwCR2Jk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066a28de156841bf3b11122b68a90722_JaffaCakes118

Files

066a28de156841bf3b11122b68a90722_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2098f57ca595746e29736cf56c218d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateSemaphoreW
ExitProcess
FindClose
GetDateFormatW
GetDiskFreeSpaceExA
GetHandleContext
GetPrivateProfileStringW
InitializeCriticalSectionAndSpinCount
LCMapStringW
LoadModule
PrepareTape
SetCriticalSectionSpinCount
WriteConsoleA
WriteProfileStringW

advapi32

CryptHashSessionKey
CryptSetProviderA
CryptSignHashA
DeregisterEventSource
GetOldestEventLogRecord

gdi32

CreateColorSpaceA
CreatePenIndirect
GetCharWidth32W
GetPaletteEntries
LineDDA
SetBitmapBits
SetBitmapDimensionEx
SetTextColor

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE