6296affc47f07be9c1382fcff256a540_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6296affc47f07be9c1382fcff256a540_JaffaCakes118
Size

7KB
MD5

6296affc47f07be9c1382fcff256a540
SHA1

4f471c164ec96715ef6cb73361a87420c9b04a5e
SHA256

d96e0c915179e148277ce3beb619f91d6fdeead074cb6d5e9616c3243be61f7f
SHA512

0c5aabdf3385dbce86ecf9726c7c43ab05b4118cc2c9e3998116c33ec4a9b58da2d9322e1e837d3a7524607a081fe1f9b7c083daadf1908e749ab137d690e90f
SSDEEP

96:ZbkhfXbLb5U9BH1RayyXKzfBpKdlaoNPY08UXATMf9IR46Q:Z6fXbLb0BpoNPY08eATxR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6296affc47f07be9c1382fcff256a540_JaffaCakes118

Files

6296affc47f07be9c1382fcff256a540_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab7b1795c084b0bbfd418ee8977125e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
ExitThread
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ