062f65b9ba0edceb234bdab8f05c266c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

062f65b9ba0edceb234bdab8f05c266c_JaffaCakes118
Size

328KB
MD5

062f65b9ba0edceb234bdab8f05c266c
SHA1

a45a8eb6dc3c0ffe4e65746e5cbd813916ebc0f6
SHA256

ceabe8974a8e96189a2ad033c437c490f817893789ac3e8eba6985ed1a65552d
SHA512

ca8a8829a701b79bca118c955b7123ebe2fa8ab9edde32ee1d33f8f281a340ba26fa3685b78c98cdba78ab2d949d6c7d4afd8d20519ffb3ef74facac0f5e2b6a
SSDEEP

6144:VUEO3op/ACeXq342duEzGWsWiWEmEiiG2GF2ilIsyhT:rO3op/GAduEzLsyEtFJT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062f65b9ba0edceb234bdab8f05c266c_JaffaCakes118

Files

062f65b9ba0edceb234bdab8f05c266c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c89f127a3676f0b14e32142cd077f426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
lstrlenW
FindFirstFileW
GetSystemTimeAsFileTime
GetFileType
MultiByteToWideChar
LoadLibraryExW
FindClose
QueryPerformanceCounter
GetConsoleCP
UnhandledExceptionFilter
lstrlenA
GetConsoleMode
GetEnvironmentStringsW
GetStartupInfoA
GetLastError
GetModuleHandleA
GetTickCount
GetCurrentThreadId
GetVersion
GetCurrentThread
GetCommandLineA
GetCurrentProcessId
HeapAlloc

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ