00b06061ca7f498da4cc101dae08afe0_JaffaCakes118 | Triage

Sharing

General

Target

00b06061ca7f498da4cc101dae08afe0_JaffaCakes118
Size

76KB
MD5

00b06061ca7f498da4cc101dae08afe0
SHA1

383d4674beb8481d040a030f28661aadd278b272
SHA256

43d67fbbe6212965a1b0d2121ef8dd0415c9f0963150b7227a881e9e4c48c09d
SHA512

0afe13f30845286f34225829f932aaaad625b42a7e3e8c825720a81c4dfc519d1a98a19713548306e9907a3a3d49188d081a1dbe4aaa2aafa12a80bebeb3995e
SSDEEP

1536:NH1QNty/d+/QkoZyaFYroZROmZJOCc/6uTRcWqRUcqpjVrs2ryrd1vUQuq6:NH2NtyV+/doZywYM5O8uTRcWO9qHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b06061ca7f498da4cc101dae08afe0_JaffaCakes118

Files

00b06061ca7f498da4cc101dae08afe0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfa1ee283c224616bbf22bae9d953533

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
SetLocalPrimaryComputerNameW
LocalFileTimeToFileTime
lstrcpynA
DuplicateConsoleHandle
CreateHardLinkW
SetUserGeoID
GlobalAddAtomA
RemoveDirectoryW
GetUserDefaultLangID
ResetEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE