66efa0c94d54459edd648d95f5cf1eec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66efa0c94d54459edd648d95f5cf1eec_JaffaCakes118
Size

62KB
MD5

66efa0c94d54459edd648d95f5cf1eec
SHA1

1a938ca99facd653e511e1be0b8543779a17ffe2
SHA256

136ad4e84f90e7447985ac85eeaa67cf69054ea524fdba1fd8e70614ddef4418
SHA512

e2201f91c3a3bfe52ce541daeac84eeb6aa38e1926a355f04bf818e2243e87a02b2bf080103360f69759f8555a590f4eec7b53251396f679721d63b66b285f19
SSDEEP

768:Kpt401mYDzZI2FgBTsPa/fdGavTNd3XvKJ07y7RW4ssAmWSD1efsDXx+gLQGrrge:sKJ3/yOygyFB+Zwr6rHxy9/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66efa0c94d54459edd648d95f5cf1eec_JaffaCakes118

Files

66efa0c94d54459edd648d95f5cf1eec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e7c8b64adf8d534178534254e977005

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
SetConsoleCommandHistoryMode
GetProfileSectionW
SetInformationJobObject
AddLocalAlternateComputerNameA
SystemTimeToFileTime
WriteConsoleOutputAttribute
SetThreadPriority
DeleteVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE