b61da27a14c997d026bd05c7037abb5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b61da27a14c997d026bd05c7037abb5f_JaffaCakes118
Size

26KB
MD5

b61da27a14c997d026bd05c7037abb5f
SHA1

6ce3963c3aa221b63c015ae12309405dadd01609
SHA256

d564d51fba362d7177487dd5c56a14fe8e3eac91d7fb4c656a1355de03ad9637
SHA512

e5415c84f689321fe8cdddc8b4d941304f572ecea12494c9913c799ea1ecf23800faf46c1e1cef75d230e989cd5669e319f1f3d30c4125ff48eff76582d581ea
SSDEEP

768:W/ziejI699BlxWIhBzAUcFOs7RoFjQFxGao:WLiet9vlxWIhBziFOYsf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b61da27a14c997d026bd05c7037abb5f_JaffaCakes118

Files

b61da27a14c997d026bd05c7037abb5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff927df9041610851956a3da8805d6dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
ExitProcess
GetProcAddress

advapi32

AreAllAccessesGranted
AddUsersToEncryptedFile

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ