66125dcca9a7afa48e291b38f1c60e54_JaffaCakes118 | Triage

Sharing

General

Target

66125dcca9a7afa48e291b38f1c60e54_JaffaCakes118
Size

56KB
MD5

66125dcca9a7afa48e291b38f1c60e54
SHA1

a0015e152f93ef9a104923b51bd2dbd8323f6ef7
SHA256

0cc0778682f4d80f295686bb60cab478aa33ba0ead26ab64818899e080386f18
SHA512

a6616f43cd7105b096929a1fabcbdebe7f2331bff01e24b9e51eafe33c40dd6ab06ffaad8116b86421b596c3aa3f3bca63c8f5b86a515e2545db78733a496889
SSDEEP

1536:YhtezdRpG/I41ELMflVmm8huzBo8BcyOxD5:YhtWd/G/I4WLMem8DjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66125dcca9a7afa48e291b38f1c60e54_JaffaCakes118

Files

66125dcca9a7afa48e291b38f1c60e54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5cdb6d2cb6a9c252450f8ec9bf164241

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
FileTimeToSystemTime
HeapQueryInformation
CommConfigDialogW
SetHandleCount
ReadConsoleInputExW
VirtualAllocEx
CopyFileExW
GetCPInfoExA
GetTempPathW
ClearCommError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE