69b33d3e72cec684b56b18c77a7ae432_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69b33d3e72cec684b56b18c77a7ae432_JaffaCakes118
Size

26KB
MD5

69b33d3e72cec684b56b18c77a7ae432
SHA1

4cc7fdf8ed362bf756850a186d6cc111c19be852
SHA256

ad2d5fbbe5a19e905f20be9db42cbc4db100fcde159cdca0a6ae53a8e76c47d7
SHA512

6832e26e2073fd648848a89f6784c25fced3ac0c4c2ea6932edcc9d059cfe2232d7b4f011854876d463e1eecddfa0571423a58b9b421cb810761262d85bfaeeb
SSDEEP

768:iegdokH8eRsdLfUPOX98HFwITsILY9zQwTQoxr4S:ieEHi9NIL6t5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b33d3e72cec684b56b18c77a7ae432_JaffaCakes118

Files

69b33d3e72cec684b56b18c77a7ae432_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6760e4cb409af396aca04ce7c1b5d4b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateIoCompletionPort
EnumUILanguagesA
ValidateLocale
QueryWin31IniFilesMappedToRegistry
CreateActCtxA
_lcreat
DeleteTimerQueueEx
TerminateProcess
GetProfileStringW
UnlockFile
FreeUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE