06e291cfe5b9f7dd0c63f542a8b3598f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06e291cfe5b9f7dd0c63f542a8b3598f_JaffaCakes118
Size

83KB
MD5

06e291cfe5b9f7dd0c63f542a8b3598f
SHA1

f6eb72287a8e111744887a131c3f1a07b1e516dc
SHA256

bef2dd65337493cd51b524101987511b66446199ed089ffe900afdcdf7e2dc2f
SHA512

90cfb6e4c6059bf70df0a4d6ebf9eccd51bc100ae93572c8a53c0f2b6f7ec7619d3bdf2fce68c03f5a4bf7697ba694168c18165018a45f75a65b4ffea23b1b76
SSDEEP

1536:St80mWqDDaBuVrGRD1lhOJUvAE0QX1cvpjVrs2ryrd1vUQuqKsw:SO0mTfQNAE0QaHs2qm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06e291cfe5b9f7dd0c63f542a8b3598f_JaffaCakes118

Files

06e291cfe5b9f7dd0c63f542a8b3598f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c72062b97c39637750b559d8e6989f2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckNameLegalDOS8Dot3W
GetStdHandle
GetConsoleAliasExesLengthW
BaseInitAppcompatCacheSupport
CreateTimerQueue
UnregisterWait
DeleteTimerQueueTimer
FindActCtxSectionStringW
GetLogicalDriveStringsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE