6498ae3f25a501450a79e49b11700a6c_JaffaCakes118 | Triage

Sharing

General

Target

6498ae3f25a501450a79e49b11700a6c_JaffaCakes118
Size

91KB
MD5

6498ae3f25a501450a79e49b11700a6c
SHA1

58eb11f19094063a1e1c97c7ec3bf5ab245ad883
SHA256

8192466bf84623f898ba1f2e96f98c44d96ebfd6ec89559a868c38903306be1c
SHA512

d8a50dac48a6f0bbf50331b0d2e2e92cbfa42dc453299628fea6049a38d7e2080d20091cf487563a88cb28ced5b29110a9a6e5a2d90ac3bd8dc5914415847522
SSDEEP

1536:I0F4HXyWszV85vshduxySLO9ocOrTCwywoKxXgTeHa:xF4HXBshgJwSQocOHCpw54e6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6498ae3f25a501450a79e49b11700a6c_JaffaCakes118

Files

6498ae3f25a501450a79e49b11700a6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ed52dee68c78d1468dfbfc2e2b77d8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleA
GetDriveTypeA
CreateHardLinkA

user32

GetWindowLongA
CallMsgFilterW
SetWindowLongA
SetClassLongA

gdi32

GetGlyphOutlineA

Sections

.icode
Size: - Virtual size: 226KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 343B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ