227dc48dc91cece24834015c23e3c614_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

227dc48dc91cece24834015c23e3c614_JaffaCakes118
Size

81KB
MD5

227dc48dc91cece24834015c23e3c614
SHA1

d61f850f9e9211be93024015c01e823bebff99c5
SHA256

7919b42d1031507acb2beb979ff6368a9b74f6bfa9626384a6e75bc89854bdae
SHA512

bfc7828fc50ef7a4dd4f96d1da710365af4196f0687d2650a66c1a484a499dcd658429b030dd77ae244274478f3853483643f435cf9f338e92bc2be7c3823abe
SSDEEP

1536:rgLBbS1DkX3+PJO2wRihlc8Q3AEmgRqfz8fbf67y+takvgbQ2nZ:rkngwRc2PpmSqfYjf6G+WZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
227dc48dc91cece24834015c23e3c614_JaffaCakes118

Files

227dc48dc91cece24834015c23e3c614_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e636371c8d3fa1ce9a3b25e801bd698

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
GetConsoleCursorInfo
SetErrorMode
ContinueDebugEvent
GetModuleHandleExW
VirtualProtect
CreateThread
SuspendThread
GetPrivateProfileIntA
WriteFileEx
AddAtomA
GetPrivateProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 67KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE