06f26296898d01f5e842dca6040c2ba6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f26296898d01f5e842dca6040c2ba6_JaffaCakes118
Size

112KB
MD5

06f26296898d01f5e842dca6040c2ba6
SHA1

a15343fe8761fab1158036ab2c273e7aae05e0fc
SHA256

d6d403a9df898cbfe687f41701c6b8afaea76f51a638601d347a3a76e9c99abe
SHA512

f8f51bbd42d90f138a1521dbe2a42cb6346da547eb72cb7f42c6a82a3b66b3db921dde925c721af95900d773dc09e4f039420ad08b2b0b5ae56f9e60a27bf201
SSDEEP

1536:0oaksdCpWAi9LrPr0Do0Fhujc+kNzMfcTO664hoaaqmGhLW1P1Q+xls:0oakWvPrSbNzQcTO66wcqTW1P1Pl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f26296898d01f5e842dca6040c2ba6_JaffaCakes118

Files

06f26296898d01f5e842dca6040c2ba6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28b40b78689be7e83ccca2ff02354d4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ