66274d9a1897370fbccef305443e423d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66274d9a1897370fbccef305443e423d_JaffaCakes118
Size

132KB
MD5

66274d9a1897370fbccef305443e423d
SHA1

e080fd3754a274bc04222abfea0998ae8217b965
SHA256

25071cbf11c4b5538e6ffdf28badf423519fbb2b88f5a816a750e7aff81ea143
SHA512

e624b2ed635c9c5970b2569bbda44b85fe6e20ed83cf07f21e59f1a69d28ec6d61020069cf90ac7d304085d98cbaaf33257d6db862391923e24726f86c6cd927
SSDEEP

3072:tfATnJg7dsZ+nM480E0cIu9D2H4lggFahHYMd7vL/3LJig2T2x:9AdeCZIuQFYYL/7J2m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66274d9a1897370fbccef305443e423d_JaffaCakes118

Files

66274d9a1897370fbccef305443e423d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc91dd850daa226545abd23e570b2c0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleW
GetProfileIntA
GetAtomNameA
ReplaceFile
SetThreadIdealProcessor
SetPriorityClass
DosPathToSessionPathA
SetConsoleTitleA
GetConsoleAliasesLengthW
ExitProcess
GetConsoleCommandHistoryLengthA
GlobalCompact
CreateFileMappingA
GetSystemDefaultLangID
GetComputerNameExA
SetTimerQueueTimer
InitializeCriticalSectionAndSpinCount
WritePrivateProfileSectionA
GetTapeStatus
BuildCommDCBAndTimeoutsA
GetCurrentDirectoryA
IsDBCSLeadByte
ProcessIdToSessionId
SetConsoleInputExeNameW
SetCurrentDirectoryA
_lopen
SetLastError
SetThreadIdealProcessor
DosDateTimeToFileTime
GlobalMemoryStatusEx
CreateFileA
SizeofResource
MoveFileExW
CloseConsoleHandle

Sections

.data
Size: 8KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ