6067c4b617ccddcb6a5f915d1c714a9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6067c4b617ccddcb6a5f915d1c714a9b_JaffaCakes118
Size

86KB
MD5

6067c4b617ccddcb6a5f915d1c714a9b
SHA1

775ab5837d0b4b9fd0278ba8194c2362d5365324
SHA256

2a3fe81de7d3ce5dc26f57c9b5dc529e214dbba07037b111018b963e9356b307
SHA512

16896590f4abbbf850dd6775ae4579923f41946af1157336a20567de6d009d88c1e1715d240f8a8b666654a61f0a8ea36c4f0db9bfa2f431cfe9fbac04420f4a
SSDEEP

1536:9+I6xHeufv+xAmwK+XLEkkgnNE2fTYU0t0l5snR+7WGDFBj3P7fzIV7i:sI6VemGAK+XLEXgXx0t+Ss7WGDrPfzI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6067c4b617ccddcb6a5f915d1c714a9b_JaffaCakes118

Files

6067c4b617ccddcb6a5f915d1c714a9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8f8da38b09e0bfb1884f8e0cf3d6964

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDefaultCommConfigW
EnumSystemLanguageGroupsW
SetFilePointerEx
InitializeCriticalSectionAndSpinCount
CreateMailslotA
GetProcessHeap
GetStringTypeA
GetSystemPowerStatus
lstrcmpW
TlsSetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE