61b1cfe8284bee475d25aa5a1d11c1dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b1cfe8284bee475d25aa5a1d11c1dd_JaffaCakes118
Size

35KB
MD5

61b1cfe8284bee475d25aa5a1d11c1dd
SHA1

75a343cde14ea7867089df3d34e0022c5312214c
SHA256

ad2a63cf51746b88aa671874ce4db4408ad5febeae4d2c83da01acf668cdccdb
SHA512

3d4ead43637dc521e962f15b5d6b245e3629e9b573402e1fd276130807cd84da59805751921e523ee79402706366029e3b86a3e8b729f32a7cdc3ea612a99c97
SSDEEP

768:HmRXgEE93wPSiFgen8RkBBKSIvZFWoWQ5v4iMJGNKob:HmBm3GSlenRKHvaoWQ5v49o0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b1cfe8284bee475d25aa5a1d11c1dd_JaffaCakes118

Files

61b1cfe8284bee475d25aa5a1d11c1dd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fab6c8fd776dcd45da9318211cce617e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
LocalAlloc
LocalFree
CreateFileA
GetFileSize
lstrlenA
WriteFile
GetProcAddress
CloseHandle
ExitProcess
GetComputerNameA
MoveFileExA
GetCurrentProcess
Sleep
CreateEventA
TerminateProcess
GetSystemDirectoryA
lstrcatA
lstrlenW
LoadLibraryA
OpenEventA
GetModuleFileNameA
LoadLibraryExA
lstrcatW
lstrcpyA

shlwapi

StrToIntA

imagehlp

CheckSumMappedFile

ole32

CLSIDFromString
StringFromCLSID

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE