602f501a1534de6e7805dc42d666a49c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

602f501a1534de6e7805dc42d666a49c_JaffaCakes118
Size

61KB
MD5

602f501a1534de6e7805dc42d666a49c
SHA1

2b32bfaa64ffbf183fdd4d0bdca66ed9c40fa931
SHA256

c15853ee88e934fd69ba605a94130197a2609ef29cfaa63c20aab62af383f09a
SHA512

1e76d84b1158f85871eacc68dae73e8524c0d516984458063414223cfba594c343225a771d6bacd841302330bc5bb0dbe79aebd2cf0c7cacccb2c9e9c267e5fb
SSDEEP

1536:ssBiTjx2GO96xhxXsrK3n6v+j3sCUrZ+Dh6b6vX2:0TjxXOQTx5n6vsCZQwWvX2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
602f501a1534de6e7805dc42d666a49c_JaffaCakes118

Files

602f501a1534de6e7805dc42d666a49c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a031782cd88d68afff57b66cd0fa845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
SetCriticalSectionSpinCount
GetStdHandle
TlsFree
GetOEMCP
WaitForDebugEvent
WriteConsoleOutputCharacterA
SetThreadAffinityMask
GetFileTime
GetMailslotInfo
GetProcessHandleCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE