61045549a9fdcd5ab41fd37fbfc03ab6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61045549a9fdcd5ab41fd37fbfc03ab6_JaffaCakes118
Size

109KB
MD5

61045549a9fdcd5ab41fd37fbfc03ab6
SHA1

dbd0c6ea4ed39ce9830578476cc191eb2600e5d4
SHA256

59a8a6a455ed9a4ea62856378c18bd361dd14edf95aceb81ba83d5f8c67665c0
SHA512

a2efaf71fb1e240249e28da7827100fca453f3d17fa3080fbe95282151cf51eae1f6bec335a7ef11642b4dfdbe5bfc981c4f47de66a739e533264a0d33bbbe9c
SSDEEP

3072:x12/4mdYr4KGHHK5geVpchIEkUuxJyk6bX:JZNGugsAuxZ6bX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61045549a9fdcd5ab41fd37fbfc03ab6_JaffaCakes118

Files

61045549a9fdcd5ab41fd37fbfc03ab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cadcf68a071584051b9c2d4706a6dc88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalWire
OpenJobObjectA
GetSystemTimeAdjustment
GetConsoleAliasW
ScrollConsoleScreenBufferW
GetConsoleKeyboardLayoutNameA
GetNumberFormatA
OpenSemaphoreA
GetDevicePowerState
GetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE