776bdb3c84b96b425fa2f2c23b1f886b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

776bdb3c84b96b425fa2f2c23b1f886b_JaffaCakes118
Size

66KB
MD5

776bdb3c84b96b425fa2f2c23b1f886b
SHA1

7da628324e5d19d27b7234987bdab659662a9d37
SHA256

8543b653bc54b2e4453552176ea3cf8af9b77b46cfef64fc7bf241dda6e07f6a
SHA512

765c3a30a9fc6802b846eb0ef1c24af351e01bf199ce9ef29b30ad4a285f9e251f21c1190ba062d7fa53c32c3bc6ad84d9eb7f203fd6dc1affe3f12ced39cd74
SSDEEP

1536:0+nQq4ij7q29onqesH2hr5D/ziHllRrvd4pETCOIw7/LPK6:ZnQq4ij7qWu3/zIrOETLIw7/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
776bdb3c84b96b425fa2f2c23b1f886b_JaffaCakes118

Files

776bdb3c84b96b425fa2f2c23b1f886b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

012e4600cdce3badfb9adac19aad961d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UTUnRegister
RtlUnwind
GetFileSize
SetErrorMode
GetThreadTimes
RegisterWaitForSingleObject
ExpungeConsoleCommandHistoryW
Beep
RtlMoveMemory
LoadModule
BaseCheckAppcompatCache
OpenMutexW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE