61ac8510d901d2a474dc0b2341993785_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61ac8510d901d2a474dc0b2341993785_JaffaCakes118
Size

67KB
MD5

61ac8510d901d2a474dc0b2341993785
SHA1

26c29bb539ee621319833631c937100b72727c0d
SHA256

7780246edf1b5b4e8c69356de04e3bdaf7b4b4a7191c4f8dbad041718373938b
SHA512

f1d1e021d2486e85e7187f88dd5e6de48d8da302ac2337d6ffc62f4b4e459284b1ae10698e57a1507b5ebed55b3661b1c940e424fa300bb4e05d709bcf459870
SSDEEP

1536:B0739nkq7qpxn73aE1z2igJm5CFKi2eqk6ur2LoiG1sKwTXVawJE7ylshY1xGK:e736r579nk6FUiGq/E0eK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61ac8510d901d2a474dc0b2341993785_JaffaCakes118

Files

61ac8510d901d2a474dc0b2341993785_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96fadb6fd4133a28f06f3d0797a66084

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
GetThreadPriority
GetWriteWatch
GetSystemWow64DirectoryW
FindResourceA
MultiByteToWideChar
ExpungeConsoleCommandHistoryA
LocalUnlock
SuspendThread
GetCommMask
GetConsoleFontSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE