66d8b9c5c087c62454a2bdf7b0f2f2a1_JaffaCakes118 | Triage

Sharing

General

Target

66d8b9c5c087c62454a2bdf7b0f2f2a1_JaffaCakes118
Size

56KB
MD5

66d8b9c5c087c62454a2bdf7b0f2f2a1
SHA1

6766f136841e56b2a65400bd1ba0af1fe2ebdea6
SHA256

3236b31b71523a6ce70441f050c41a958356a5e1ce25046d170c3b90468110ec
SHA512

7106dbfaa2be7622633ebda5cc1b8b1fe0a6c5f06616cee9c744b8ebf0f6738d94f9d8132357e23e0134a34c94bdf3f8bce101d9fd11873524b90b312b686764
SSDEEP

768:/1uLalzsvXQ66id3/DZnjdh6PQprx+UJ7UFIqTSQIHgRAb7oKbb2pkyZ0enMjzCp:oqgv3zwjIHuio2wki0gMjWaZLn0tJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d8b9c5c087c62454a2bdf7b0f2f2a1_JaffaCakes118

Files

66d8b9c5c087c62454a2bdf7b0f2f2a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b7758eb04bf631ef1ec52b7048e1b8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessTimes
GlobalAddAtomW
FindFirstFileW
SetDefaultCommConfigW
CreateTapePartition
MoveFileWithProgressW
CopyFileW
SetComPlusPackageInstallStatus
GetNativeSystemInfo
ScrollConsoleScreenBufferW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE