666ea0c7eb6e7103063bc3f1654da943_JaffaCakes118 | Triage

Sharing

General

Target

666ea0c7eb6e7103063bc3f1654da943_JaffaCakes118
Size

63KB
MD5

666ea0c7eb6e7103063bc3f1654da943
SHA1

bae8fbbc0859c77c5c8e971c6a2ddee95c66fa81
SHA256

3f6c164ff195be7b2f2bad4f83d0db8f469e255baf5e688e9f43ba8b5821a532
SHA512

f844f6851ca024b03e8006acf503841a1e19b9eba780b7d2aa37db5819e9fda1437d61d22a4eaeb23fa4b3d4c83260599f3ef1bb7c4ed962127204abaa277b0e
SSDEEP

1536:onNOwu/Ob1mHAcguQdpKjEd6YohsnpWgfIa2:oNOwuO4BQujo6YHpWgQa2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666ea0c7eb6e7103063bc3f1654da943_JaffaCakes118

Files

666ea0c7eb6e7103063bc3f1654da943_JaffaCakes118
.exe windows:4 windows x86 arch:x86

840eecbb4eb0b0fd18c361dc3eaad3d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetConsoleMode
WideCharToMultiByte
CreateNamedPipeW
VirtualProtectEx
SetMessageWaitingIndicator
Process32NextW
LoadLibraryExW
GetNlsSectionName
SystemTimeToTzSpecificLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE