66e33e0c1fc63da18ae0a89092a836bc_JaffaCakes118 | Triage

Sharing

General

Target

66e33e0c1fc63da18ae0a89092a836bc_JaffaCakes118
Size

66KB
MD5

66e33e0c1fc63da18ae0a89092a836bc
SHA1

b07667be9e6be34a4832576a934f7322a851c998
SHA256

d35e5a8f664fa8aa5a1ad4c5923e0a57b895bb629ceea61734ef12701bcc89f9
SHA512

05b0888dfb735b5962738b0444b5794c28f871be7848cc63a108c484be347d8c1d00e6f6b6a1f4ddd72f80726c61212f02ae262fe0f88417473f0bd5487776f6
SSDEEP

1536:kUgmfZFWyFNXwuUWt6haDjI/dog8HYrV1kH3+:kAKuBwhppFrgH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e33e0c1fc63da18ae0a89092a836bc_JaffaCakes118

Files

66e33e0c1fc63da18ae0a89092a836bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b97662539aa0a5d150c071d7ccbc3cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
SetTapePosition
EnumSystemGeoID
NlsResetProcessLocale
HeapCompact
HeapSummary
SetCalendarInfoW
WriteTapemark
GetGeoInfoW
WaitForSingleObject
PrivCopyFileExW
GetSystemRegistryQuota

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE