6947b765dac03189780de83b9030b375_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6947b765dac03189780de83b9030b375_JaffaCakes118
Size

83KB
MD5

6947b765dac03189780de83b9030b375
SHA1

75b38cb45f6f70b31045770ce50cd0614fc5ae9c
SHA256

555e430fca1861ce42a248addf7ce19f22c21aba84dcd1949bc5d8eb3514c784
SHA512

ca6ed5d5ba828bff425649004a1bb3307a14f507b032421cbaa4b841811fc958635cffcee68d3130cdf553d04dc598dd7a8ad6252e93ccf648611c753ebcc396
SSDEEP

1536:zLKo5DqwYZHWqt3+JAzrz0gs4ntaTi/f6ZXiCu32Lz2Fb/JHjEErxTWDTMqhGKYr:ZCNvt4Af6ZSCuSzub/NjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6947b765dac03189780de83b9030b375_JaffaCakes118

Files

6947b765dac03189780de83b9030b375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccb598f5e67e1acbf5ae2a8673e0b7d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetDiskFreeSpaceA
GetExpandedNameW
ReadConsoleInputExW
LoadLibraryExA
FlushConsoleInputBuffer
DisableThreadLibraryCalls
MoveFileExW
Module32FirstW
HeapUsage
CreateNamedPipeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE