6dface36cb0319ec7ffffdda40ed4676_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6dface36cb0319ec7ffffdda40ed4676_JaffaCakes118
Size

58KB
MD5

6dface36cb0319ec7ffffdda40ed4676
SHA1

4733d70c32bbf9ae9707a213ea58d05562d2f6b4
SHA256

89ca5316b9da356ec4ea8f1cc862ed84032da1e5bc0dc45123d8bc50a0a21d7a
SHA512

e1fd1097ac8b5726c180d437f53edcae86bf60e7a2b7fa3493296ad872b303683cd35770ba5a92e8edb21fd3726805789552326c2ecdeab407861ac24931dab8
SSDEEP

1536:GEqCw1EIqCmnwkeiFCTa8bJrqxbmMUCW4ueDJk9Hi:G5CwRkeioOm0ml0AFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dface36cb0319ec7ffffdda40ed4676_JaffaCakes118

Files

6dface36cb0319ec7ffffdda40ed4676_JaffaCakes118
.exe windows:6 windows x86 arch:x86

f55cd5d95264c6f90cba0e0fc69746a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

winamp

WACUP

Sections

.MPRESS1
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 847B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE