6186a9dcd94a688d5dd8c4a469429a6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6186a9dcd94a688d5dd8c4a469429a6d_JaffaCakes118
Size

21KB
MD5

6186a9dcd94a688d5dd8c4a469429a6d
SHA1

404e1625be17d9763b048aa2a6c16a53521b6138
SHA256

9ec87671df50878035864ef92b327fb7eec7daf9d262e91a3b8bb54c0139ae32
SHA512

0c6bda4d5c1a6367dc0692facf921638dcf54e0e14ae9a0a9b2b17bb126bb9118c63d47a0111a5bd0d0b4e65c9c725bd84dfd156a6c54e69cfb166fbbcf6c327
SSDEEP

384:ulRycUO25OtWOe+Mj664sPWNz6GBZIs0tSH6pX2g:0RzU75Ot1e+MjT4b56GBeRtSH652

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6186a9dcd94a688d5dd8c4a469429a6d_JaffaCakes118

Files

6186a9dcd94a688d5dd8c4a469429a6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e567ec093f2cd8e218885e80a1d6d52a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
SizeofResource
lstrcatA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
WinExec
CloseHandle
DeleteFileA
CreateFileA
FindResourceA
lstrlenA
FreeLibrary
LoadResource
WriteFile

msvcrt

strlen

Sections

.text
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ