62499474a27e4de44420de10f2ca996f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62499474a27e4de44420de10f2ca996f_JaffaCakes118
Size

63KB
MD5

62499474a27e4de44420de10f2ca996f
SHA1

10e0e43495fb8fb0d50ead1b4b15c766828375ad
SHA256

6cab1efa252a63b2769eee7a04839ed6fd6b15d8820d102ec28335034a2dc167
SHA512

65e04966b6455e0b008ab00f4a7a8a4602b6e16847e4f38dd975ebf68ad87d8cf01949fc709dd497351e608c8eeb74fe24aba5ab08cd6aa535a082991a2dcbaf
SSDEEP

1536:IPhRByETedy1EtAHo1zYkGGalgv16MYNVvN4:uBedy1EWFlgQMW14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62499474a27e4de44420de10f2ca996f_JaffaCakes118

Files

62499474a27e4de44420de10f2ca996f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41691ffe950788570a8be5c6c2126d4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
SetConsoleTitleW
OpenProcess
MoveFileExW
WaitForMultipleObjectsEx
GetConsoleAliasA
FormatMessageA
SetConsoleInputExeNameW
IsBadStringPtrW
SetVolumeMountPointW
lstrcmpA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE