6184e84aafb36ccce012dad33ee7aeee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6184e84aafb36ccce012dad33ee7aeee_JaffaCakes118
Size

86KB
MD5

6184e84aafb36ccce012dad33ee7aeee
SHA1

4d119d1618c6a0eb8c2b8a44c9cbab5e4bc06ab2
SHA256

c5fcf758580853507a94d7ab9e8ab9116835dbb171d626e4c3b10b83cb42e688
SHA512

0973ab1c011456cbc80cd4acce2929e07c09c750cfad9b825ec17f76f80d06b43e2bf564236fb779ade16ee505e44fe6b49853df91f5920e3b99197678cf5649
SSDEEP

1536:ymE3hqoY79Tdf2cJW+tDjA2tD+B9JvkBA9aIQR5Nf1BnJNP7dcf7T61s5Varlj:y1hqoY5Td+cJW+hArB9JvBdQbNf1Njd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6184e84aafb36ccce012dad33ee7aeee_JaffaCakes118

Files

6184e84aafb36ccce012dad33ee7aeee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f604000dad982d4bb9767abfc89357e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
GetProfileIntW
lstrcat
SetEnvironmentVariableA
OpenEventW
GetHandleInformation
GetSystemWindowsDirectoryA
DecodeSystemPointer
EnumResourceLanguagesA
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE