2261ac69d9526a78e7d18915330c2205_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2261ac69d9526a78e7d18915330c2205_JaffaCakes118
Size

56KB
MD5

2261ac69d9526a78e7d18915330c2205
SHA1

48c10369f5852e32361e1cd3b59d92c89a21e186
SHA256

edd7e9831373387e217900ddc581bdf3613f0ef8fb474fa58acc38ec55f4d8f4
SHA512

f11569f6492bd3ca94ade43c6deaac3d9b3e0482e9f5acf1d83c3f992b9ed4ca464212b79ab7a91106b4c5f9226ba02f13e48b1f5243ac32ac5050aa830ad8e6
SSDEEP

1536:LkwEEEE/7BT8PYzvqFBDx+EEwzQm+bSYGh3ZiiSI1uEdF3t079a1YnHgvUkehj9G:LkwEEEEwFdU1GFuc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2261ac69d9526a78e7d18915330c2205_JaffaCakes118

Files

2261ac69d9526a78e7d18915330c2205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbcea59f180e952fc0cb58e2d3c26368

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTimerQueueTimer
GetACP
CreateSemaphoreW
ExitThread
CreateFileW
VirtualAllocEx
WriteConsoleInputW
HeapSetInformation
OpenSemaphoreW
VirtualLock
TerminateProcess
PulseEvent
CreateFileMappingW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE