6f41c10929ffc149ac6a664207d166aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f41c10929ffc149ac6a664207d166aa_JaffaCakes118
Size

63KB
MD5

6f41c10929ffc149ac6a664207d166aa
SHA1

f60f45e6b6188ee945caad6aa4db3dc534a98de6
SHA256

4f3525dba86eadc96c10842913f287a151288244b3b5eb6de977648b1aa3d536
SHA512

2684cbb13c3d27c88b7084831a4f22c4680fb93457772303a428596db3d8eb9633fa263cf3f2aebae04bf9a4b52a1863d6e104cfa4e8b6e094203617a129c425
SSDEEP

1536:N/33XJWzlBnHwe2sILm1bSXo4VZkA/6ijvbaHpcJpaCg:d33XJWzLys+mG4hAXjvSpczaCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f41c10929ffc149ac6a664207d166aa_JaffaCakes118

Files

6f41c10929ffc149ac6a664207d166aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4b49faf8f4f422cb8866e54e99959ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthW
VDMOperationStarted
AddAtomW
lstrcpy
InvalidateConsoleDIBits
Heap32ListNext
SetSystemPowerState
SetComputerNameExW
GetCPInfoExW
GetFileType
ChangeTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE