64607a921dad846541d5c56ad9f8855d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64607a921dad846541d5c56ad9f8855d_JaffaCakes118
Size

56KB
MD5

64607a921dad846541d5c56ad9f8855d
SHA1

ccd70c3025d0d0fd58045e7805b7304381855127
SHA256

a0634ad797b79cad3ecc7020ae7703cb6376ba0f599dfb74434b8d2ccd37413a
SHA512

85e0274ee219aca29c31480fa68341c8e27a9275ad48b625d583f55fbb31db05d9e44a8e2611b1ce3dd94cce7b19b7b180a502f74f9986658f56404d0bba1d44
SSDEEP

768:sWGVrfbGZLFG9lRDgYNyRxRdW8hLj/DZDbPRVGggCLm//S5gu1kKs9ARE9TK8ies:OMRbPRVGgZm/65v1kN058AJpWqdmw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64607a921dad846541d5c56ad9f8855d_JaffaCakes118

Files

64607a921dad846541d5c56ad9f8855d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e61b6ff7bb3fed527edb81ca82c7d349

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
UTRegister
DisconnectNamedPipe
GetDefaultCommConfigA
GetPrivateProfileStructA
GetProcessPriorityBoost
DisableThreadLibraryCalls
GetWriteWatch
AttachConsole
SetHandleContext
MapViewOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE