612cf00d3f20c6b0df913ce57cd4b92f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

612cf00d3f20c6b0df913ce57cd4b92f_JaffaCakes118
Size

66KB
MD5

612cf00d3f20c6b0df913ce57cd4b92f
SHA1

5d9e0458272c49b0de1aa77c1ec601d702e2225b
SHA256

6d9d1c8f2e04c0f4606734dbbb3fab07a04598c2997b2d4d01840e01a11b4f92
SHA512

4019274d5aa1c6b4b7dc19f9a117f81c2dfc82cee01a536dd26ca112ea412fa78f68d31ab8e828d7824dbf6e2dc64f1fb5aa99877857816896f17a2c9b91bb1f
SSDEEP

1536:Z3JbvFluDzAR2Ntb1YKTSF8/0FVyu8lratSDfVYVfuVsNN3Y8:D9lazu2jpG8/0FVyugratSDfqduO31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
612cf00d3f20c6b0df913ce57cd4b92f_JaffaCakes118

Files

612cf00d3f20c6b0df913ce57cd4b92f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08c74689284fc11c4f6a1a89ca21f909

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructA
OutputDebugStringW
GetBinaryType
SetDefaultCommConfigW
SetDllDirectoryW
UTUnRegister
InterlockedPushEntrySList
GetDiskFreeSpaceExA
IsValidCodePage
FreeVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE