6063d4e912423844bf05bd3344609390_JaffaCakes118 | Triage

Sharing

General

Target

6063d4e912423844bf05bd3344609390_JaffaCakes118
Size

20KB
MD5

6063d4e912423844bf05bd3344609390
SHA1

477af9d717cf9195961b7f45952ab98e83d23c62
SHA256

d95604c6ddb81bee4b8fca81f3b054365740673aa88709de792fd61d20d51d34
SHA512

4c58ada769f5bf73aaca36cf70e2386343e9758997e8281d00c42cda23ef5dcfdf289f6a1584d6e39befb7327c3dbcd0b22ed78f93f92528e7c61eafb311a02f
SSDEEP

192:i/ony7HC5dk9gr62XN2g+kLWkR4Gy7Tcw:Ty7i5Zr2cLLKlIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6063d4e912423844bf05bd3344609390_JaffaCakes118

Files

6063d4e912423844bf05bd3344609390_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7aaf5f65e742cc5ca8a778091d17df8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
GetModuleFileNameA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE