6584f8999a87da1e5e1caa7f9c8a1509_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6584f8999a87da1e5e1caa7f9c8a1509_JaffaCakes118
Size

536KB
MD5

6584f8999a87da1e5e1caa7f9c8a1509
SHA1

688e217136f381eac3a82f915a2bd7e4873455a7
SHA256

2f7fa8655300fdd8ac64d769b9b665c6c2cba0d6bbd7ae93362796c263aed8df
SHA512

d3abef8bb9e735d220942f0a0c72b1847ca333b45904d3aa20daa8d57b83365ec141cb3892510627650a754421db2b1f9020a2c1fa1d9a751588f10f37549e1d
SSDEEP

12288:7Kr67Sro8wRowr+k/ol7BWlEhnOxQvJsRe1UcWlUPSehupk:Ws/8wzCk/osQ6QR118UnIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6584f8999a87da1e5e1caa7f9c8a1509_JaffaCakes118

Files

6584f8999a87da1e5e1caa7f9c8a1509_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d29ff4c6e10d3cca76c243260468f8d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6199

msvcrt

strncpy

kernel32

GetStringTypeA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DrawIcon

shell32

ShellExecuteA

wininet

InternetCloseHandle

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dadavmp
Size: - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dadavmp
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ