61df515cccbc723d6750d92a6de8e66a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61df515cccbc723d6750d92a6de8e66a_JaffaCakes118
Size

111KB
MD5

61df515cccbc723d6750d92a6de8e66a
SHA1

641c211bafc29743611c6c67c9635fbef2fbff31
SHA256

910a57fa9cd5aacaad5513708f50e0f91decd3a81496a4c45c3cac15a8fbf5b8
SHA512

b00f7c59da4c3034ba066c9ff6b7c0767a1f4faa79afa5a97b8d6a5d98420e0978e66df8f71262c4e433511bbeca7613897b586e59edbcbde487df6b97224f64
SSDEEP

1536:q0KDYlkHWWedyxYY8xonkrPDFFyCy9t7OHdgOcgcROVNIRea06WFR9:q2lkTxYY8PbDHyPt7wd0ROVNIRN0/FR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61df515cccbc723d6750d92a6de8e66a_JaffaCakes118

Files

61df515cccbc723d6750d92a6de8e66a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ab8c04f5e76e8aa1e6353deb27c765b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetCurrentDirectoryA
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ