608ba2ed176acf4ba661fd7b0778dcae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

608ba2ed176acf4ba661fd7b0778dcae_JaffaCakes118
Size

66KB
MD5

608ba2ed176acf4ba661fd7b0778dcae
SHA1

3a34db16127ddeeca47e7a70970b12cbf10fb946
SHA256

6ade84abbc2e5a9e9567674262f519df295f9b4b1005c2a6770d73e965000ed0
SHA512

6fba27756f396862114d9283480ab11e2cdb6d793ce64ec3aad7c33f6f2a395e33f94a98295cf55b759174c92e7cd3a3ccbd6c8eea94be5e9725c0ef8cd12513
SSDEEP

1536:COiU+Rc2Hx4UFUMnzeDmKLD7e9VOvVthpEAl5YDBu/O35Aq0AQ7COMKBB:COipZxDFvevAAvzhpEAADBueuq0AdOMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608ba2ed176acf4ba661fd7b0778dcae_JaffaCakes118

Files

608ba2ed176acf4ba661fd7b0778dcae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

433b39bf1132539e7f10d87a2765b8ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
lstrcpynA
SetCommState
FindAtomW
EndUpdateResourceA
SetEndOfFile
GetDiskFreeSpaceW
CancelIo
GetSystemTimeAsFileTime
SetDllDirectoryA
lstrcmpiW
SetComputerNameExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE