624af0a2535415a7d2e4b7bb585465c0_JaffaCakes118 | Triage

Sharing

General

Target

624af0a2535415a7d2e4b7bb585465c0_JaffaCakes118
Size

63KB
MD5

624af0a2535415a7d2e4b7bb585465c0
SHA1

0e0dca5049a843c101d764674a1da1ef8c6407b7
SHA256

ee628d4a67d2701e5216e59544385a93777d66a26d308e12bbf61b0143057b60
SHA512

1a8fc9bb144adab2f623b80073cfb6ba497a63bfc9c298e756d664ad5516b4a70a01074a45722b06ba989e2b779d7e5bb6656847e9f629ae3dea1bf6abaecad1
SSDEEP

1536:c5ttUyriQhz5pszdonNA/j2b1do/m2jPd4g+JErgZfSK:c5ttUyrrfps5oNAL2b7o/fF4WrgFSK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624af0a2535415a7d2e4b7bb585465c0_JaffaCakes118

Files

624af0a2535415a7d2e4b7bb585465c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

691c6180abb57664a286bda844463aea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
MapViewOfFile
GlobalDeleteAtom
GetCurrencyFormatA
GetCurrentThreadId
FlushViewOfFile
lstrcmp
AddAtomW
LocalReAlloc
DeleteTimerQueueEx
UTUnRegister
CreateMutexW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE