681f241008641ffb04f22e5ba8bbacfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

681f241008641ffb04f22e5ba8bbacfe_JaffaCakes118
Size

63KB
MD5

681f241008641ffb04f22e5ba8bbacfe
SHA1

ff08fd0c37531cf4d5b5a575b90ac6769de55d6a
SHA256

30079cd705f2eee604b1d91bfbd557e2007556655052179237ff139bc3821618
SHA512

5ddae2f1db619de4fc4da679ee1bab7e68f09a86f562877a11df2b479af765a6f0328f8658902029f4d096402df021cb93a4d15a4f1612ef60156d6736d65c73
SSDEEP

1536:eem2OnwCAN5/TGp84KRLCZ1GZRRU9acRTbIR+J4A6:etw/3ZRLCZMr0XIR+J16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
681f241008641ffb04f22e5ba8bbacfe_JaffaCakes118

Files

681f241008641ffb04f22e5ba8bbacfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e1591d7129c3a043a2217b71be9879

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
SetConsoleTitleW
FormatMessageA
FlushConsoleInputBuffer
CreateSemaphoreW
CopyFileA
GetThreadPriorityBoost
GetVersionExA
GetVersionExA
LZStart
GetVersionExA
ScrollConsoleScreenBufferA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE