6117b80ee3911fc8e08298e79c9b6f11_JaffaCakes118 | Triage

Sharing

General

Target

6117b80ee3911fc8e08298e79c9b6f11_JaffaCakes118
Size

156KB
MD5

6117b80ee3911fc8e08298e79c9b6f11
SHA1

b08f77975f45b33c3d8e10ff774684d8abdcd99a
SHA256

5331da36f8610054bb8004c8b929857ea358f43b0be69ee49137a870e9cfd81e
SHA512

362b38f9b10dc31666311a816deafcc903f88bd09bed7cd208a09f3ccab5a96f0279ed1a973158861ae94fca2017f35e4b472b5bc7a6be12ef649735f6f1869f
SSDEEP

3072:ghJhCoUVyZKygkP0YLhUVlyICMUftwodFbvai7/5bXQ/DCcVX:ghJ0P0BL0YLhYyIytbNjQ/VVX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6117b80ee3911fc8e08298e79c9b6f11_JaffaCakes118

Files

6117b80ee3911fc8e08298e79c9b6f11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68f579ed3797e30b2d2c0d5e9960c620

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
Sleep
LoadLibraryA
MoveFileExA
GetModuleFileNameA
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE