64eb9f31d9717b271ee952270ec7d17f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64eb9f31d9717b271ee952270ec7d17f_JaffaCakes118
Size

66KB
MD5

64eb9f31d9717b271ee952270ec7d17f
SHA1

26d47de33ee80c2b596139a9e6d183c4f8cd3ac1
SHA256

6f7c1c9650ccdc6f081cfce0b118396bc5693958f3e9a0c731570ce352031839
SHA512

24c69b973d4de1cf4cfbcb57889c6f80a9ff12b42c44525d2c1849c4a5f6f2d26387be33e108583cc0b6ceaf5f04fcc86353a2fcc3db8a8a80b0116397d6c26b
SSDEEP

1536:W20IzwnFTvXVb7MxTaB/cQY4vxfdWSKe7/LPK6:W20nFh7i2lg+P7/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64eb9f31d9717b271ee952270ec7d17f_JaffaCakes118

Files

64eb9f31d9717b271ee952270ec7d17f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e74e3cebc3b6c9da3bf67a592495dc8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalWire
GetPrivateProfileStructW
LocalShrink
EnterCriticalSection
FindFirstVolumeMountPointW
CreateTimerQueueTimer
VirtualQueryEx
SetErrorMode
GetThreadSelectorEntry
GetPrivateProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE