61b867be88511480265f4ca03d16bd2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b867be88511480265f4ca03d16bd2b_JaffaCakes118
Size

50KB
MD5

61b867be88511480265f4ca03d16bd2b
SHA1

4f29026d80f13dc3eb96e7a9c1e7ef5da3a7fbb5
SHA256

4dc32cbf45be0a7478bf49ea341d503ec281bc2e792b3c8b003a59a6ab4096be
SHA512

403b2a8a1032ff03af1624e5205aa6a73f31dfe8453eb0566b4a166cf242cdb89b1e18f74c765a0cc23a2456f461051ac99f34d710a2955769aa041f0b9d7ce3
SSDEEP

768:Y8Mb9sU4+Vya5Wk7Fy3hJ0RYKebw+5a4+BrGZ+Fi6TBL7y38MQvJ9Fm8sdE7:dIx4w1vFGhJ0qKAw8+MUZTBXysMQUfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b867be88511480265f4ca03d16bd2b_JaffaCakes118

Files

61b867be88511480265f4ca03d16bd2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c8750e03ef3c7ddf04fc81f8f1fa04f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
GetSubMenu
LoadStringW

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ