66a58a33ac8369c656e21d0dfa8b6532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66a58a33ac8369c656e21d0dfa8b6532_JaffaCakes118
Size

56KB
MD5

66a58a33ac8369c656e21d0dfa8b6532
SHA1

9a9556de86edd59454ad93300b67d0d622e5bb59
SHA256

4b891e782046f6ed0d8e50aa60b5ec7099e3f5e18c2092d54065acd6f8690740
SHA512

0941d41d13475ae11664c6957a7f180d2e3e3f38f3765abfe7f512ecc285c95eab8a25abe74fc507e026dcff621d4ee0610ceeba2173a13072e7974943d7460f
SSDEEP

768:vIgggZ/VSxqMoEU3jQ5gNeLYCuigxzyAHP1OGEaHH42EnLjjVeeKcUl/jFKPMnBz:3ZeJ3aHH4X/kcGktXH1Tn2U9Zq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66a58a33ac8369c656e21d0dfa8b6532_JaffaCakes118

Files

66a58a33ac8369c656e21d0dfa8b6532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67925b5cfe168ed0fbf52052773be7f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
SetDefaultCommConfigW
GetWindowsDirectoryA
Process32FirstW
FreeResource
FindActCtxSectionStringW
OpenWaitableTimerW
GetConsoleKeyboardLayoutNameA
GetSystemDefaultLangID
SetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE