6477bd8f77186541bcbd75432e0db1ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6477bd8f77186541bcbd75432e0db1ca_JaffaCakes118
Size

66KB
MD5

6477bd8f77186541bcbd75432e0db1ca
SHA1

70632070e36d704ab7626b2fd82850abc566d38c
SHA256

d6af9ede7039d246a4b856f6be360cd55361ef74d378a3a98d1102eca5e32fb1
SHA512

e381dc36791a7a0f6aa0b7601d4fb5828b6b429bccfaf245426c1d4b94e0906112ae176c2431cc4c3eaafe3ad34b4614607e63062fb0d0f251d1ce738a6e06fd
SSDEEP

1536:eMqKXrS7ZSlqnTxSLi8af/Ncea4wIVhdtLZ0U37y4nVVvMbrV1kH3+:i8QZSQn9tZlh3l/0C7y4TvmrgH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6477bd8f77186541bcbd75432e0db1ca_JaffaCakes118

Files

6477bd8f77186541bcbd75432e0db1ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

464da0856084b2293e9459e9688b7405

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
AllocConsole
RemoveDirectoryW
RequestDeviceWakeup
GetPrivateProfileStructW
Process32FirstW
RemoveVectoredExceptionHandler
SetCPGlobal
GetModuleHandleW
FlushInstructionCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE