6199a01f4fef3ab665c515be31ee0624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6199a01f4fef3ab665c515be31ee0624_JaffaCakes118
Size

56KB
MD5

6199a01f4fef3ab665c515be31ee0624
SHA1

1957ae01eeedbbc372e9f3119c0878df1ba20ba9
SHA256

0926354cc5c8bd1bcd63f526d0cdbc20bc8c83da79c05e44d7d3adfb83b3efc0
SHA512

854ef6da8fbde45eb085fa2a9fc16ba8781cd213bc92ce177dea77c4b96c75998df9d7aa2910f2cd932162da713d59bb5f34cfc0b34d2197cfc84822800d780c
SSDEEP

768:ZID8BFCP7RgKuEaAEqiyRqDC6/yvftM/OQKLmqkpVdPqLhh97fw+BtF+RGWFuHZE:4Xh0lDdYtWO9pkFPqVw+BtUQ7pn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6199a01f4fef3ab665c515be31ee0624_JaffaCakes118

Files

6199a01f4fef3ab665c515be31ee0624_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73e03d3932b998805cd57949f4a5370e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetCompressedFileSizeA
CreateToolhelp32Snapshot
OpenMutexW
GetExitCodeThread
CopyFileA
CopyFileExW
GetVDMCurrentDirectories
IsProcessInJob
LZCloseFile
GlobalDeleteAtom
GetVolumePathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE