6116dbee275bc521b9c9b30ca9793abf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6116dbee275bc521b9c9b30ca9793abf_JaffaCakes118
Size

68KB
MD5

6116dbee275bc521b9c9b30ca9793abf
SHA1

4535d08772679f1edd230d8abeda9ecd6f4cb80b
SHA256

7345b24caf8d3b5cfa40e2611759b96c468eb1ee6d971ea64c9dd12df7bae327
SHA512

42457066940a37ef5a8943cf6d053e4595d80f3e757a30a68510e6538954714530e2aa0b5347eaa5089f4cebd0368511bc358214a80f22fbb53d65a5dabee8de
SSDEEP

1536:6cAhQ6o4OEXfxbNzqc+DOoBvoR6GnomniecKg1+7RWNtSDHbnjBDU7:xEVNp+DvoR6Tmiyw+sOjBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6116dbee275bc521b9c9b30ca9793abf_JaffaCakes118

Files

6116dbee275bc521b9c9b30ca9793abf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76a9ec7a594a815c1eb994175f3c62a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSizeEx
SwitchToThread
GetFileTime
CreateEventA
IsSystemResumeAutomatic
lstrcatA
ClearCommError
IsValidCodePage
RequestDeviceWakeup
GetNumberFormatW
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

Pjjdoxxbkvp
GetJlaewpta

Sections

.text
Size: 5KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE