61c340a165a5bd2621bfb197afbea325_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61c340a165a5bd2621bfb197afbea325_JaffaCakes118
Size

86KB
MD5

61c340a165a5bd2621bfb197afbea325
SHA1

9b1e7e84ba13ca0ce01ec0410f4480bf50f1b734
SHA256

5bd379c10f9887a9e49c67a20f778bb692957b118149a3c539e73a7019afd0fa
SHA512

60f82729b11f0cceecd8872506af449f4454366572f3530bb9c1065329ff04c170ae45a80d054e5876ed939208a662ea7b9b55a974129f6a48b9d9ca8176a697
SSDEEP

1536:MNRbn78twtrxqaviwON3i20mIKqmhNf1BnJNP7dcf7T61s5Varlj:MNJ77lqhRqCNf1Njdw7T2cVarlj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c340a165a5bd2621bfb197afbea325_JaffaCakes118

Files

61c340a165a5bd2621bfb197afbea325_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca4f2c9516959e4a5f04ec918c84d4bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibraryAndExitThread
GetStringTypeA
SystemTimeToFileTime
SetConsoleTitleA
SetThreadExecutionState
GetProcessVersion
GetTimeFormatA
GetTempPathW
MoveFileWithProgressA
HeapSummary
SetUserGeoID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE