620ab50fd9dd2222006f76dbf74e55ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

620ab50fd9dd2222006f76dbf74e55ac_JaffaCakes118
Size

56KB
MD5

620ab50fd9dd2222006f76dbf74e55ac
SHA1

e85f5e37091c46b57a33e4b6d3274527f844279b
SHA256

6e6328f930fa3896fa2eab0a43cc3962d7734e25ed621919b7402b699db111cf
SHA512

4cf574d353a20532121ec0e3fe8543b51142f6034acbc5c1ace0622d06cb054191d087a1bede759a9f492a328d24636a52ed5fac9c17d94b7fcc5f4584cb8147
SSDEEP

1536:LUuql8a9GBKiMlVKj2M59fptYiu9uGPsIM:k8a9JiMlVc59fpV7GUIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
620ab50fd9dd2222006f76dbf74e55ac_JaffaCakes118

Files

620ab50fd9dd2222006f76dbf74e55ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61bceef9a641e549d630a842656cba5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ZombifyActCtx
SetStdHandle
UpdateResourceA
GetVersionExA
OpenFileMappingW
UnregisterWait
GetPrivateProfileSectionNamesA
FileTimeToDosDateTime
LocalLock
SetDllDirectoryW
WritePrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE