67711a6db7fe099096a46dc3e2a1ce69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67711a6db7fe099096a46dc3e2a1ce69_JaffaCakes118
Size

66KB
MD5

67711a6db7fe099096a46dc3e2a1ce69
SHA1

aa44e8c2e52bced9073e3dc7856d100e862df409
SHA256

16d5e7220d0b35c5c44b1a221de5367d7c1f41ca60865c317f18c907a51f65d8
SHA512

aa4fb97783d22caec09504b6a49b65cb17f4f08a3fdf9aeeeeef1ff8da117b0f041fe440bdb83581fcc52020d6e2bfe4e61f2e817f9d36203b91d1f97365b73b
SSDEEP

1536:2vT+myH8jjE3aYU8z2JTHbG5qNiR8mE/wpR6FBfG7/LPK6:aNycjaaYU8aHC0w7E4pMFBu7/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67711a6db7fe099096a46dc3e2a1ce69_JaffaCakes118

Files

67711a6db7fe099096a46dc3e2a1ce69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b4c54a7e2ede4cea515abf40782dbfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
SetEvent
Module32FirstW
GetTickCount
SetCurrentDirectoryW
GetPrivateProfileStringW
GetThreadSelectorEntry
RtlCaptureContext
DeleteFileA
ConsoleMenuControl
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE