606cc4c4252184733ba0a7e8dbe2281c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

606cc4c4252184733ba0a7e8dbe2281c_JaffaCakes118
Size

67KB
MD5

606cc4c4252184733ba0a7e8dbe2281c
SHA1

2c416c16b07a28261b368442bd6c2c5e1fe790f1
SHA256

51b9846b0731b97a36d86fac58381cf64fa53cec577e30d5342d9b93a1ea1215
SHA512

4832d55f40e54aa979dd5dc25f1154641dbcd655b38130fc6bd1559dfbdc0067f8d13742c20b0047686d34ff816752e8098a1fe3f12def4f79eec6750f10ca97
SSDEEP

1536:L6/zNLU8MoTlBN7DqRMvABu8npSQe783TLKiHoHzb8nvHCC0w+TVNpk:G/zVlMoTPYRGWuMc83TJDvHLAn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
606cc4c4252184733ba0a7e8dbe2281c_JaffaCakes118

Files

606cc4c4252184733ba0a7e8dbe2281c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6692039b63d8b43528d21c0f0a925e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
FindFirstChangeNotificationA
InterlockedPushEntrySList
Thread32First
InterlockedExchangeAdd
GetLogicalDriveStringsA
ConvertFiberToThread
GetThreadTimes
FatalExit
GetConsoleCommandHistoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE