6365815a91ebb6b1865ab593a79db2b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6365815a91ebb6b1865ab593a79db2b2_JaffaCakes118
Size

57KB
MD5

6365815a91ebb6b1865ab593a79db2b2
SHA1

97762021aefdfb2f6f37c2d54619a72f209abf47
SHA256

7ce21467f807f37a7c8cb2bd4579f7fb98160c4476bd04e316eae2b057607953
SHA512

e9748b40850c2bdb72dd6b7d84255639e670a0beb7aaaf02e06a37ab6281436cd72ec7d991f00c90b42d6c58382d7495b1a2cef3be1c1124e8f8d6e8d45b63a7
SSDEEP

1536:TJL1g7irPUQ0VJYE4YPuWL0ke3k9DAyuJL1gWkc:TJCwtY1LqU9syuJCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6365815a91ebb6b1865ab593a79db2b2_JaffaCakes118

Files

6365815a91ebb6b1865ab593a79db2b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2da6907371bb9cf311e3ac21bb5f0ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetCommandLineA

user32

GetDlgItem
LoadMenuA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 15B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 235B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ