61b5eeb34b13930c2d7a1ea890acbe5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b5eeb34b13930c2d7a1ea890acbe5e_JaffaCakes118
Size

106KB
MD5

61b5eeb34b13930c2d7a1ea890acbe5e
SHA1

5365c1411333ae56bf2805547ebe89135e2b329c
SHA256

398660bd00e84df0281f78212a1c6145c46ef36a6bea88c5afb8deb0e8ac62d6
SHA512

32fb537abea4fd0d2b801a4a8dc3dcdc89339c9360c4e4ac3effdf9bfe92a7e790c7412f4d16fd269bd2d839f6b5a4782d905cb3db0a4acb20a7b971369ad891
SSDEEP

3072:prFrR1pQWqcuZUXa4s5cDGk75SCsu2oh40kv3VucVEfM:JFrH1qcpsvC5Fsu6vFul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b5eeb34b13930c2d7a1ea890acbe5e_JaffaCakes118

Files

61b5eeb34b13930c2d7a1ea890acbe5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe69a7865d2c492830a46c61914746ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryWin31IniFilesMappedToRegistry
AreFileApisANSI
lstrcpynA
GetLastError
CreateSemaphoreA
QueryPerformanceCounter
GetUserDefaultUILanguage
GetVDMCurrentDirectories
TlsAlloc
CancelIo
WriteConsoleInputVDMW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE