6308a6147f9bf3ba4fd3dbb4e54804bb_JaffaCakes118 | Triage

Sharing

General

Target

6308a6147f9bf3ba4fd3dbb4e54804bb_JaffaCakes118
Size

44KB
MD5

6308a6147f9bf3ba4fd3dbb4e54804bb
SHA1

ac621c445cd3d8e8c9ba09c614204b5fa4a27648
SHA256

c5f142cba12f32b0f1a01d696223ad1a21c702819c53cd9377929a9d6257951c
SHA512

533fcaef99bf47193fdcf5bbfdc6de5d5f997185526279272d4e833a209a154ac4ca7ba392dbe196491d34a6f64eb65e193c45a2bc6d16ec4145e9e3a7dafe91
SSDEEP

768:8hFwO11j/AlKGxM3w/h1AoiTZn4vnSrUM7vqIjGAJL8k:2FwW+j/h1A/4vovqXAN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6308a6147f9bf3ba4fd3dbb4e54804bb_JaffaCakes118

Files

6308a6147f9bf3ba4fd3dbb4e54804bb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4cfe8bbfb0ca5b84bbad08b043ea0c87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WTSGetActiveConsoleSessionId

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ