61ac5a55e4f1d28ea357f7056d34dc64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61ac5a55e4f1d28ea357f7056d34dc64_JaffaCakes118
Size

56KB
MD5

61ac5a55e4f1d28ea357f7056d34dc64
SHA1

8c2380cf078871cdc310cf70507f9dda5aefa94a
SHA256

bc96414d41414102ec8640c8b52d81228f14a1e91061ea4c9441a931e53e8a3d
SHA512

c53f15fa153d9cf9a3aca1e7ce9ca391a86936d2f2aa641b75b93218aba5b91d8f04041dbf13e71d03573c514be037ceeef80b118ebf246cf4efc6c6ac71cb3f
SSDEEP

1536:aLXLZQk2UOhVa0Pgh4CxnE9bUc9QHtzoJFGU1fV8u/xjSws:wjODabAbUcmHpoeGVf/5SN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61ac5a55e4f1d28ea357f7056d34dc64_JaffaCakes118

Files

61ac5a55e4f1d28ea357f7056d34dc64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f8e4195fd83628faf25c4519bd881fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetSystemRegistryQuota
ReleaseMutex
CancelDeviceWakeupRequest
CreateNamedPipeA
LZDone
HeapQueryTagW
MapUserPhysicalPagesScatter
SetVolumeLabelW
GetProcessWorkingSetSize
GetProcessAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE